qa.paier.at
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a5:6a:dc:42:c5:a9:b1:28:92:2c:fe:7a:5b:b5:a9:35:66 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=qa.paier.at
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a5:6a:dc:42:c5:a9:b1:28:92:2c:fe:7a:5b:b5:a9:35:66Serial Number (int): 317625490164397164150375916696710505117030
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1a:69:55:44:b5:79:db:59:d8:c5:c1:35:7d:8a:85:81:b7:9e:0f:99
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 66:ac:7c:a5:a1:9c:9f:82:34:7c:4e:2d:a2:74:9f:2b:22:cf:83:1b
Fingerprint (sha256): 5b:c8:44:08:d7:a9:e4:fa:2e:a0:e0:78:d2:e9:30:9f:fa:9a:2c:04:74:b4:cd:cd:aa:1a:5e:5e:19:9b:3f:ce
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate qa.paier.at
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for qa.paier.at
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
qa.paier.at
Other certificates including the domain name paier.at
(limited to 100 certificates)
www.paier.at
www.paier.at
qa.paier.at
www.paier.at
paier.at
qa.paier.at
www.paier.at
www.paier.at
paier.at
qa.paier.at
qa.paier.at
www.paier.at
paier.at
www.paier.at
qa.paier.at
www.paier.at
qa.paier.at
www.paier.at
qa.paier.at
www.paier.at
qa.paier.at
qa.paier.at
paier.at
www.paier.at
www.paier.at
paier.at
qa.paier.at
www.paier.at
www.paier.at
qa.paier.at
qa.paier.at
qa.paier.at
qa.paier.at
www.paier.at
paier.at
paier.at
paier.at
www.paier.at
www.paier.at
www.paier.at
www.paier.at
www.paier.at
www.paier.at
www.paier.at
qa.paier.at
www.paier.at
paier.at
qa.paier.at
www.paier.at
www.paier.at
paier.at
qa.paier.at
qa.paier.at
www.paier.at
paier.at
www.paier.at
qa.paier.at
www.paier.at
qa.paier.at
www.paier.at
qa.paier.at
www.paier.at
qa.paier.at
qa.paier.at
paier.at
www.paier.at
www.paier.at
paier.at
qa.paier.at
www.paier.at
www.paier.at
qa.paier.at
qa.paier.at
qa.paier.at
qa.paier.at
www.paier.at
paier.at
paier.at
paier.at
www.paier.at
www.paier.at
www.paier.at
www.paier.at
www.paier.at
www.paier.at
Certificate
The complete raw certificate details for qa.paier.at in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgISA6Vq3ELFqbEokiz+elu1qTVmMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA2MDQwNzIyMDBaFw0x NzA5MDIwNzIyMDBaMBYxFDASBgNVBAMTC3FhLnBhaWVyLmF0MIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEA0EwruSYpggOXa5LdEgsLeNrTrO2mrlX5DHfp Kz5kwug1KnvZAHA1d+H555eFC356iFbOnLia2xagjNANkj9+OvKwLemzQnKcElSy AYxOKGTN90pg7oi8Qup4yp6SAZ1h7km3CBjT1msYNj3fiqbLmS3BLu5xP22FtEOd 2DC/Z0kTdFeKisK9zVXlhCVFhAFrUE/FUg5R/HJxUGMS9VHuZqL8rE4qkBglSPys mQegA9Lndvd2e+wUh/Mo2gbreGhTemU6D2LX5gfIQnrxHW9sUbd5P7cuklaktGRW FC36XjGk3nhQtURcU+rRi6yWPbfCw0SQEXWunFWmt60+iqRVTQmowfNI9o6Vt+Eq sEXqao5WcASRf541nHPlvzAqG4TnrAphE22BondltpM3TcDM7PY0aLUdnC/hE/hH ekfl68hBN5Npa5fFyd6jG90x9oRMmumgev5ctk8PbwPeRO4pmp8Q/3+tpQnuMP8a AOtChX2iOudrPitbr5xiBSn7lYrHmGbjLNkF07WI7XTGs4C7Ryu8pO6K+r6Lgjxh qIPnnq0UQzlVei0iZ7RChEsV/ZvBx1kfxg4XBW7lj2c2KqhRrewfW4zdkWJfD4PW 458Zs3ho0HWmuPBb0hj0r+NnfimFrXTUN4Mu8aTFSU6rIeIzLgBueLjlJCXJIz7S sGC6B6UCAwEAAaOCAgswggIHMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUGmlVRLV5 21nYxcE1fYqFgbeeD5kwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzAWBgNVHREEDzANggtxYS5wYWllci5hdDCB/gYDVR0g BIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEW Gmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1Ro aXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWlu ZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlm aWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3Jl cG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQBZf5KZd2l1VvUhrYKwAaJ9zG7I a4AaP5WlGpFVOdF/MAEOB/T3jMLYZJSon27hnLvYQnR6TKofttX74Bwvt1hmbgUq oqLpWlJmUTpfIHdf3C+hdNkGjnPobu3UfrUuE0/fui/tKP1zZY2me8zEWhp3CRLS vSgLpeUZ4jTD4hPNSBgeK0bST2/j42rQ9zx4azg44Lp7gzAY8j90yp5VY6ta4Cqv wL3lDkxada4ZfBJzK0ib5s/lMu3bqQBC2dux6Rh3kNT/udpyBrkmRyBexq1DZOjl YufnuuoeD1BpHJlQmVJzH9XhZaw+L9cba47mnlL+tWdFD9ShuaOc/TvZxg1K -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0EwruSYpggOXa5LdEgsL eNrTrO2mrlX5DHfpKz5kwug1KnvZAHA1d+H555eFC356iFbOnLia2xagjNANkj9+ OvKwLemzQnKcElSyAYxOKGTN90pg7oi8Qup4yp6SAZ1h7km3CBjT1msYNj3fiqbL mS3BLu5xP22FtEOd2DC/Z0kTdFeKisK9zVXlhCVFhAFrUE/FUg5R/HJxUGMS9VHu ZqL8rE4qkBglSPysmQegA9Lndvd2e+wUh/Mo2gbreGhTemU6D2LX5gfIQnrxHW9s Ubd5P7cuklaktGRWFC36XjGk3nhQtURcU+rRi6yWPbfCw0SQEXWunFWmt60+iqRV TQmowfNI9o6Vt+EqsEXqao5WcASRf541nHPlvzAqG4TnrAphE22BondltpM3TcDM 7PY0aLUdnC/hE/hHekfl68hBN5Npa5fFyd6jG90x9oRMmumgev5ctk8PbwPeRO4p mp8Q/3+tpQnuMP8aAOtChX2iOudrPitbr5xiBSn7lYrHmGbjLNkF07WI7XTGs4C7 Ryu8pO6K+r6LgjxhqIPnnq0UQzlVei0iZ7RChEsV/ZvBx1kfxg4XBW7lj2c2KqhR rewfW4zdkWJfD4PW458Zs3ho0HWmuPBb0hj0r+NnfimFrXTUN4Mu8aTFSU6rIeIz LgBueLjlJCXJIz7SsGC6B6UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 317625490164397164150375916696710505117030 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-04 07:22:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-02 07:22:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa.paier.at' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849779832271206088689174959680164870786905189727283061397253143752404932327982570570981576405975366177058350799448091290147343434201223086849483370963713798326023118662490104442350427047051653990343744520456206694698020383080659328255980571814858437594005630866365798280255779756156237496756174677063419043331400821878331395898807586874004517690577383797314263776432875336044011179898004536768065515239931301398304989139428118958883222787947746518088112011506977285297840828804111806432325817573322385444636706952578071132304835538093945036051304281310246925668319841310235520787667152375766061024886629489489804304484358170078563512158068413309559015992962980469072114290311133382700785659855819140589535345051015315696934597215419444131788449684487749456093274563547465408512976748614164886016233327357210397652598649877680484844702693828212318026807800646110130398830668007523560122437666743121208939328408650799522393281017859612011008989074274806289797207012658342877947663431273929320766939657244251577809428842659240190108945780105496065470386857866747810954868265560335977238401461340454960376736450786664611594457992936866482028323683250964685804123780799171932502164324032833669797871739715735210566981195345849276882880421 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1a695544b579db59d8c5c1357d8a8581b79e0f99 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.paier.at' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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