debian-archive.anexia.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:db:60:0f:1f:8a:8c:59:b8:3f:e2:52:52:b8:39:89:4f:fb was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=debian-archive.anexia.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:db:60:0f:1f:8a:8c:59:b8:3f:e2:52:52:b8:39:89:4f:fb
Serial Number (int): 423098666494506360537224912127621887250427
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 55:e1:cf:2d:3b:16:c0:7e:60:a0:76:3a:21:9f:7b:2a:9a:8a:1d:00
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8e:10:22:c8:8a:c9:db:91:b2:a8:48:3b:7c:d2:b5:16:96:d1:f8:35
Fingerprint (sha256): 4b:a4:86:b9:20:55:f1:04:03:f3:68:35:dd:5f:75:b7:97:3f:88:de:33:25:45:2c:e3:88:66:46:33:34:31:96

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate debian-archive.anexia.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for debian-archive.anexia.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

debian-archive.anexia.at
debian-archive.at.mirror.anexia.com

Other certificates including the domain name anexia.at

(limited to 100 certificates)
*.anexia.at
*.anexia.at
centos.anexia.at
debian.anexia.at
*.anexia.at
webmail.anexia.at
debian-archive.anexia.at
debian.anexia.at
*.anexia.at
webmail.anexia.at
webmail.anexia.at
*.anexia.at
centos.anexia.at
office.anexia.at
centos.anexia.at
debian.anexia.at
*.anexia.at
centos.anexia.at
debian.anexia.at
debian.anexia.at
debian-archive.anexia.at
debian.anexia.at
centos.anexia.at
bugtracking.anexia.at
centos.anexia.at
centos.anexia.at
debian-archive.anexia.at
*.anexia.at
debian-archive.anexia.at
ticketsystem.anexia.at
*.anexia.at
webmail.anexia.at
*.anexia.at
ubuntu.anexia.at
debian-archive.anexia.at
*.anexia.at

Certificate

The complete raw certificate details for debian-archive.anexia.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423098666494506360537224912127621887250427
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-22 22:42:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 22:42:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'debian-archive.anexia.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 649407540048963693642916404884251568246218402170141816502068446994842255553204247867220907911316778355677426041233076692851459520362972712312802527499674143647345778334800364586922630364111003468190550014613909961295271682338575414506268239529249388668729966007416414186512304632439539440293396511947316734310172691042719118836956741676290868817731339294768698677815906177662975965433988244482219062896405861331321603182281237688831518212093240245595236386478612207041031883456467457239852677942886920861442793562160969251388113887972471047846694367240904700257910006339528344468515777807220169325727177259331230155180250327136524914917257747611663457702603019475592981430558992290673731521209435957277326412223442650682046938375296769413533981474467773541427733981537874681183360591678809449163222703108897469486611103059710436317529977704642399923416724118294499296204818084077303915390748716175629982186658624177095750034951986103238182360961184990815395641737508873077006691535384916646278008915860782995642191129937026706092496577100932717441324793234022452871362306953353413777706100515241576170148420255058072003080113965918907976710561506143360248585035824775715243766147161015083112022613444551484610736820641156004321982503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55e1cf2d3b16c07e60a0763a219f7b2a9a8a1d00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debian-archive.anexia.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debian-archive.at.mirror.anexia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e957ee9d50000040300473045022100da343ecf49e5968a8a4dec6ef9a87f34e187adc930ae066594951ac31877de7f022002f4b8a9bd62d24f9f562d19439dd307578bac0345b058752bc3c0dd6ccb2a9d007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e957ee9c60000040300473045022006f315abc57d76bda307de129669cb4a03295c79139cd724f2da1a987914b1a2022100827cb1f74217e1dd5b755200a373885465292405d15f4ddbc96f8e5ff8887fd6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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