www.ahk-baku.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:81:87:b1:97:e0:31:5d:74:60:70:b6:7c:10:2e:a0:6b:59 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ahk-baku.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:81:87:b1:97:e0:31:5d:74:60:70:b6:7c:10:2e:a0:6b:59
Serial Number (int): 305413651024462962333732723682495669758809
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f1:a4:24:24:a9:18:e7:97:3e:e3:cf:13:51:dd:c0:64:15:d1:f3:fa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8d:f0:07:2a:97:12:18:ab:af:5f:7a:d8:36:82:7b:4c:9d:aa:f2:63
Fingerprint (sha256): 47:b2:96:de:9b:d2:b6:cf:73:cd:77:30:e4:41:68:1a:f7:bb:b9:d8:80:60:80:ff:7b:1f:ff:83:9c:72:9c:ab

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ahk-baku.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ahk-baku.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ahk-baku.de
aserbaidschan.ahk.de
www.ahk-baku.de
www.aserbaidschan.ahk.de

Other certificates including the domain name ahk-baku.de

(limited to 100 certificates)
ahk-baku.de
www.ahk-baku.de
www.ahk-baku.de
lists.ahk-baku.de
www.ahk-baku.de
ahk-baku.de
www.ahk-baku.de
ahk-baku.de
www.ahk-baku.de
www.ahk-baku.de
www.usa.atlanta.ahk.de
www.ahk-baku.de
www.ahk-baku.de
lists.ahk-baku.de
lists.ahk-baku.de
lists.ahk-baku.de
www.ahk-baku.de
www.ahk-baku.de
lists.ahk-baku.de
ahk-baku.de
ahk-baku.de
www.ahk-baku.de
www.ahk-baku.de
lists.ahk-baku.de
ahk-baku.de
www.ahk-baku.de
www.ahk-baku.de
www.ahk-baku.de
ahk-baku.de
lists.ahk-baku.de
ahk-baku.de
www.ahk-baku.de
lists.ahk-baku.de
www.ahk-baku.de
www.ahk-baku.de

Certificate

The complete raw certificate details for www.ahk-baku.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305413651024462962333732723682495669758809
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-22 21:08:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-20 21:08:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ahk-baku.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803032593860061434316004903112424658391974531779779451701179730934529764829874363683715421797472707742883113742334225761969616877878614389591053560473975048233702386167352363820407760740848828329707859655816017913909914758685944009082206912437028799023875937769798141589751744462996872599930866204040977193537862401240935183838110710613814039709374263255762979371393873214748543296719439605957727999965206471660903343059400329700050197282768394030166404612926573729852016437193173622246997080793939512978052614068647565392630145116541319565853294475138139133985383762436201913656236695636827669958820442745191157475475229096087970178525254847525305904870266868865260309970543167725496080535173565801453160719434674289110622176277108671007598178523082157861500644898447077816136992549590580186268081047130799021284663881839097086274684869666451440376352093746304415724890176476309971701728864047653426218049536191838936916229378123052924546029865281341341188367080298056200230121524089172579018492781363253218583111289983071189727367570137356351763503240352473538654417184348263775570720258576441597183890496547054865254120065352666748138296284527216768115043970523151414393206356207160110732551287705078498546889930381637233760318951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1a42424a918e7973ee3cf1351ddc06415d1f3fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahk-baku.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aserbaidschan.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahk-baku.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aserbaidschan.ahk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000171044a793400000403004730450220066fb785d742162ba3dcc45738995ed790b46551e829fd2a9a68aa9c147389340221008511ee440cdcd414111f023963eec42b7c9eab11e23bbe78f8463f9d89b1741400750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000171044a79870000040300463044022067f42c4f1331ff2e112f1705e25372eafe62cf0f89bea1885e375694f014b8dc02206d4a7f2315f01e403af4c6e2fd715baf445fa4c2f2ecbf43a7f7af3cc5f10137
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0018157b1a7068724ed7bd227a8aeb9c8aa071a7f1bae7de6d9a986d318321feea305fdab83c38554033097141cb26e58772d760d0874a2dd29e19493ca29692dbc7180823d92c44e7d4f5c37ddf3efcfca3daedafc6c0d77e97c9a7c1bb4d1d73d022c4000a29d8cab09475b5f89e83398624455132e656a52888a9edb43f7e2a0a56eed044da0420f613d203416aade8da69c5bd91fc3e5e3c0fcc44246151f555650bfdba7ba5b55faa1492bd3b8999274fc2cc2ded2a4c061d6166f606fc655c6798dca409ec3a51e924ff36ff1c57b1dbb2ce159e294293da934ee1541a91fc2679a77a3199888ef3e60a26a405c007beb90bf076b5a66253519133de9cde