qa.paier.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a5:6a:dc:42:c5:a9:b1:28:92:2c:fe:7a:5b:b5:a9:35:66 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=qa.paier.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a5:6a:dc:42:c5:a9:b1:28:92:2c:fe:7a:5b:b5:a9:35:66
Serial Number (int): 317625490164397164150375916696710505117030
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:69:55:44:b5:79:db:59:d8:c5:c1:35:7d:8a:85:81:b7:9e:0f:99
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 66:ac:7c:a5:a1:9c:9f:82:34:7c:4e:2d:a2:74:9f:2b:22:cf:83:1b
Fingerprint (sha256): 5b:c8:44:08:d7:a9:e4:fa:2e:a0:e0:78:d2:e9:30:9f:fa:9a:2c:04:74:b4:cd:cd:aa:1a:5e:5e:19:9b:3f:ce

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate qa.paier.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa.paier.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa.paier.at

Other certificates including the domain name paier.at

(limited to 100 certificates)

Certificate

The complete raw certificate details for qa.paier.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317625490164397164150375916696710505117030
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-04 07:22:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-02 07:22:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa.paier.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849779832271206088689174959680164870786905189727283061397253143752404932327982570570981576405975366177058350799448091290147343434201223086849483370963713798326023118662490104442350427047051653990343744520456206694698020383080659328255980571814858437594005630866365798280255779756156237496756174677063419043331400821878331395898807586874004517690577383797314263776432875336044011179898004536768065515239931301398304989139428118958883222787947746518088112011506977285297840828804111806432325817573322385444636706952578071132304835538093945036051304281310246925668319841310235520787667152375766061024886629489489804304484358170078563512158068413309559015992962980469072114290311133382700785659855819140589535345051015315696934597215419444131788449684487749456093274563547465408512976748614164886016233327357210397652598649877680484844702693828212318026807800646110130398830668007523560122437666743121208939328408650799522393281017859612011008989074274806289797207012658342877947663431273929320766939657244251577809428842659240190108945780105496065470386857866747810954868265560335977238401461340454960376736450786664611594457992936866482028323683250964685804123780799171932502164324032833669797871739715735210566981195345849276882880421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a695544b579db59d8c5c1357d8a8581b79e0f99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.paier.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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