stefan-hofer.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ed:61:8e:e6:d2:6f:40:2c:07:03:96:05:f2:d1:14:28:0c was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stefan-hofer.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ed:61:8e:e6:d2:6f:40:2c:07:03:96:05:f2:d1:14:28:0c
Serial Number (int): 342113455858914757949022244981010077067276
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:71:fd:fe:9f:09:77:57:5b:8c:41:91:c4:cf:23:1b:e4:69:e9:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6a:cb:a4:1c:da:1d:f2:0e:0c:cf:c4:c5:09:95:2a:fb:eb:37:ff:18
Fingerprint (sha256): 4d:11:7b:e1:49:60:39:fa:da:88:7e:c1:ca:e1:78:59:ef:07:23:1a:78:82:02:b2:58:b5:ea:b8:1c:8e:1c:99

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stefan-hofer.at

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stefan-hofer.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brixental.de
fieberbrunn.de
langlaufparadies.com
pillerseetal.de
stefan-hofer.at
stefan-hofer.at.futurecms.at
stefan-hofer.at.kunden.ortsinfo.at
wanderurlaub.co.at
www.brixental.de
www.fieberbrunn.de
www.langlaufparadies.com
www.pillerseetal.de
www.stefan-hofer.at
www.stefan-hofer.at.futurecms.at
www.stefan-hofer.at.kunden.ortsinfo.at
www.wanderurlaub.co.at

Other certificates including the domain name stefan-hofer.at

(limited to 100 certificates)
stefan-hofer.at
stefan-hofer.at
stefan-hofer.at
stefan-hofer.at

Certificate

The complete raw certificate details for stefan-hofer.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342113455858914757949022244981010077067276
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-25 15:24:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-23 15:24:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stefan-hofer.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 634517033019161326514128487383517699941029272110135850565242555542859297182834724837364174559961042366665846082536999286290809134237395844358677155346400399493964136601585311450828558547526184186760157108740336591890569780142730269082070037425506170043451474215583817463729459078006151905893473789462914422572424187727644168148882690317641509830379602882711141394672777515236312015936725910714574601360139826470103007055698619185480825180548317800761071350470736530761097682756983027379423570947291774686245090973321920171197527356592528022565459922822260294866730235401430524840550439796303665623702101678923143805247154207407727762489949463092305286542423965016594223630118400429100029500573811417330648910584480281574108647782734995020560810726192587800461208179129414010625979182691110934689381872485239483974645230622301790420498296371531833321526472863856470469423119174709685464599627424192375270252990088532638430627673961658528230007711725219599710164944647890968448902161583579998547506154743208404872274981762437050451888946096923412885154924897668635877412187914709002054684491221537912312540743324231750307744083210106493311153600144621748825246583681758044683972456617224588157741570763206795561352936636673713564540683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb71fdfe9f0977575b8c4191c4cf231be469e906
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (380 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brixental.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieberbrunn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langlaufparadies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pillerseetal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stefan-hofer.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stefan-hofer.at.futurecms.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stefan-hofer.at.kunden.ortsinfo.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanderurlaub.co.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brixental.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fieberbrunn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.langlaufparadies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pillerseetal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stefan-hofer.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stefan-hofer.at.futurecms.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stefan-hofer.at.kunden.ortsinfo.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wanderurlaub.co.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001711282a2170000040300463044022022adc4626836bb1e3c896df52639fa87ceac83c92da3ac6cf9e4480a801b680c02206215bf557b3faf6ce9fc910c6b04d3e3125ba88e5fe7448889dbcc13c5121a6d00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001711282a2770000040300483046022100b29b1fa8ed23bd9c43fc477f4da4721e09108a52d5e92066c9da9df16e63169f022100cb78c9416d30212e3370f91bf842c2eb79f3a5715e7381d6b988e2138e1456e2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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