discourse.zmc.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b2:0f:a9:3e:4b:16:23:ac:96:2e:43:d9:5a:3c:71:e6:a5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=discourse.zmc.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b2:0f:a9:3e:4b:16:23:ac:96:2e:43:d9:5a:3c:71:e6:a5
Serial Number (int): 321927936288772011972925685509781185488549
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 19:bf:4e:91:a8:a6:2f:19:c6:66:60:1a:73:c7:0f:f5:fd:c2:c9:1e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0f:ff:4b:8b:56:38:80:ea:68:fd:88:63:ae:86:26:b2:9a:c0:f2:bd
Fingerprint (sha256): 46:7c:a2:ae:b9:f2:68:9a:8c:ee:2d:21:1c:5a:83:43:4c:9f:13:57:93:ad:1e:e8:09:11:1b:ee:75:e2:d5:07

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate discourse.zmc.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for discourse.zmc.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

discourse.zmc.at

Other certificates including the domain name zmc.at

(limited to 100 certificates)

Certificate

The complete raw certificate details for discourse.zmc.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321927936288772011972925685509781185488549
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-08 15:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-06 15:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'discourse.zmc.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 953342652058208462272666876200369800676428173599752234250764012821678234846438837704188112862289428202872690884976364598989636191109066894380599544229312378812291753035137751536176157393734572719512141211498480630158139195546091198505610191424504124952828576039549726795384849459545213997223562046924883539861835934266613933883156126437792319759480261140668335729327825975567532075229456095121678563821658576472838934063841130062803573544578651416327896086670008753333426050382227307932599121596055795595143271677544307590409858985253992699674298252612034061905192461202026653588066255417853431488860920046291649758260211030153755639906469436650126985774679285250396405207184988615021918267223412839079884352088452374401272644746291896706823558840856716403930040105392640577821986747803430890120988300662260009111913691841812832271118651493872617377245269740344579312782988741261885187394152840307417783461920174971987821044353688995002198736318143426467360859978265602920661143057987070832350980686184591843715642064784621358102111052501800372193710365595864070303106416592227400859738621111143877372965427760756442558273166174710764612964898010167200605388008242194773636843811341300035798091212551082812694411723703112370200893279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19bf4e91a8a62f19c666601a73c70ff5fdc2c91e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discourse.zmc.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0095c68dc864687ba27802d80313b5890641047a22208061d635d485bc9f91467d7788718fb1e8b4e2b744f03019dacafe5acfbf79d58ac61e4c8829579be9c593072b6984dec38702f6f7829497335091266079bcd519cc10eed47670cb1ee620cba478d7bf06ec0ade52a057eb500ae0271239a431b763b5fd9e20c6a5d2c11a964625b191993a350810ce3b14bee621576f2d4418ba648e0e84b7b705cf91157e4be46b3475fb01276a2b5f19351e18a26b086d3c02b63c8d6e668668db54f23aa6684a6dd2f7a0819e39133ef6a9502623ec8c825b2eab855fbd7f53942acd493f5b122fe47a3d4301a05fbf395442933927e68b384e965abf2ba79e5e0655