www.hafen-wien.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bf:66:a2:4d:5b:fe:7b:7b:42:0d:c6:6f:3a:28:e3:3b:82 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hafen-wien.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bf:66:a2:4d:5b:fe:7b:7b:42:0d:c6:6f:3a:28:e3:3b:82
Serial Number (int): 326467213853875191264904925504309733571458
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ea:2e:86:70:e0:c3:7d:21:be:8d:2d:50:1e:89:37:11:9b:c4:3d:6b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5e:fa:94:bc:d8:aa:a3:6a:c0:7b:85:10:65:8d:81:ab:c8:fe:fd:ef
Fingerprint (sha256): 45:94:9f:c0:ff:66:85:17:14:52:c7:fd:2d:28:fb:a2:91:4b:7e:d2:4a:5b:9d:5e:fb:fe:42:86:84:b7:5e:8c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.hafen-wien.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hafen-wien.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hafen-wien.at
hafen-wien.com
hafen.wien
hafenwien.at
hafenwien.com
marina-wien.at
marina.at
wienerhafen.com
www.hafen-wien.at
www.hafen-wien.com
www.hafen.wien
www.hafenwien.at
www.hafenwien.com
www.marina-wien.at
www.marina.at
www.wiener-hafen.at
www.wienerhafen.at
www.wienerhafen.com

Other certificates including the domain name hafen-wien.com

(limited to 100 certificates)
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com

Certificate

The complete raw certificate details for www.hafen-wien.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326467213853875191264904925504309733571458
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-20 23:07:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 23:07:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hafen-wien.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798115143940750422674853689007787133099948828290642301971527024084555496094142955579492302767908771495866404090199205696563126147995661622882490507114427442732219122182663797354084070170710371623762835627067151217314152488785506609645318012718777173901320339193423637899226361614004759886242435514058621998518106339052651945661724352576245250053509258848879191895732452533803471500233735809941092429873886089464278926648355484616910222768980199627811268966371807006350943240136039592810165692763267093611000315397532625503665523166928772740497537760052133535877760638134891009171061216705142095389926634849698361802411970662226644555545216862940097340892179729060285497386593757484342988860261790825218241652853753028595075524985965220536239847228015193068320820189278708068729336841642593541968893056052594493009942802166502290799023540725156804933011151432417818315982135688544060568250663846923941605639433233335351223138557603522704511728770268076542575125778573835815449785383428369483739664540090569599340549185425023821451146660531485148431316415188784719110121886070194877891009638663748358527265641904595993175508553058888849839093870642779809106947893823244619089070131578167258152078534988041216606492322925403469645258509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea2e8670e0c37d21be8d2d501e8937119bc43d6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (309 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafen-wien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafen-wien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafen.wien'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafenwien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafenwien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marina-wien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marina.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wienerhafen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafen-wien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafen-wien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafen.wien'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafenwien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafenwien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marina-wien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marina.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiener-hafen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wienerhafen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wienerhafen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001699d92cd0c000004030046304402200963d729fe88ed0a60fe9cdd8dfcb7982b8707482017aed371a58e11a19aacb6022059062911b9dcd421fc3cbce0735eaded1ce58269d7913bb4df0d740eeac845e9007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001699d92cd5a0000040300473045022100ec95a2395374fd64e7f6a6a05249209f2a8517969f80093b7cedf9cdd1a3e82102205c72b62af67a723d4c297b8d1f62cb0f288ed3aec90d3341b49a8fb1c8247718
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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