www.hafen-wien.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:af:ef:88:83:34:85:07:67:d0:be:6d:52:0a:1b:c6:3e:57 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hafen-wien.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:af:ef:88:83:34:85:07:67:d0:be:6d:52:0a:1b:c6:3e:57
Serial Number (int): 408316952242727266310919583850844765175383
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 26:5d:a4:c1:7b:ce:83:d9:dc:2c:cb:29:00:fb:70:50:4d:0d:e1:27
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a7:dd:52:d8:c2:aa:9b:b4:a2:7c:71:bd:8f:c6:08:4a:c0:da:28:d3
Fingerprint (sha256): 66:ed:46:0c:06:d7:56:41:9c:5c:27:cc:97:71:85:9b:3e:ac:3f:5e:c3:b6:9b:f2:4d:ff:1c:57:49:45:55:1c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.hafen-wien.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hafen-wien.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hafen-wien.at
hafen-wien.com
hafen.wien
hafenwien.at
hafenwien.com
wienerhafen.com
www.hafen-wien.at
www.hafen-wien.com
www.hafen.wien
www.hafenwien.at
www.hafenwien.com
www.wiener-hafen.at
www.wienerhafen.at
www.wienerhafen.com

Other certificates including the domain name hafen-wien.com

(limited to 100 certificates)
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com

Certificate

The complete raw certificate details for www.hafen-wien.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2wt60fYnyiXn4ggZhnPl
3Go1HfjCEqWT6M6/l5y2pcZ4wBl2zACSR2a/CHVXpIhDmSU3jRSLwa+OtcCgIyyQ
0gHTSTzl5t43hYmwGgyupdtl9mJl4o3lRxc042fvG2HpjEIqwEPEnEe+UpwbqBvB
1n4NbsEYOIx9hf4ws2n9vxrc6wJfRMJHJ5kyQKj8POTIbx5MxIpWMGAlpHq1DFZX
sTRlPNrKBuE6Utd7UdRkNufNPVORBRDxinhtDrXXz6pniJOjeEc0yrzE2PXvOtAz
F5D9KtvLt9x8dPd2B/ypICkQELakS9s0zCGt+8+FYqUdCtXLgLevNNtkBedcwV9L
iPViW2SAEqmt4WPbf8nvkaBhGBGNZLs4HgPQtJHCb8CsGZk7yQCMVMTr89rkv7p5
Q3fCOq1oASZeBTGsqajcxdkBVeqqiLYez5wwk8pHW3kasqrXoTnNTpr6MrITIF0z
rwGyRYv+25Fq70fOC7CxSn59+/zvm0DsGYCWWbWNjCR+6oinqofMAY7BayJ2MdAQ
O+6bl3LQckF8EOybOOzvdYjv4UdVP2eeTvcz4p0fRUqPnTxlyjbUXkGXs3ByVJ6e
O5ogm7/MqPDJfFIF5O9ihCiobTiUtv/Np4YSCgeWjaAxD/74+xzzYAMNey8bhDk5
UroAA+M/G4unWS9WDxEmjb8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408316952242727266310919583850844765175383
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 07:15:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-03 07:15:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hafen-wien.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 893624993710159622351763706229082158154405466614575356074716817782409040812645220939509749908380314713821618512418589467477962852507353775300902985804925302079187135818646803393435684608476735235276536050543045891975826887373026056427643417215710073323183836212322116339042078721417145884238087532485520512251496781974564008558569408171355563129266040468417402182996471637824800163647148525000041143418694327113381662864168798768407854863948524593461233427021635379585032192056083736878490105172720837272256070859078984659363908169860459960436530198304849798975182447926497325411815865554390099786533479657149904722913305304424145053408777745162188307505787737368486938928564702145404456997608906818902597276201831805796873329729029600452169595009990628732520997345178963153773263935073310379300007005603401953688358581440328175513886137946163115339738191330297521645513158331166014130714206999556654895894048056600801928761605189656858080651789851442488145997229638696426650909587582182220507587502745821896538509616320849836133456749870178528817674166425024458979314224918913513250076162236278469544251680770715240773470965596732920855292125575571263720442114907097674354889560979542971608144716716475442810276410405206989748997567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							265da4c17bce83d9dc2ccb2900fb70504d0de127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafen-wien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafen-wien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafen.wien'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafenwien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafenwien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wienerhafen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafen-wien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafen-wien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafen.wien'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafenwien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafenwien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiener-hafen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wienerhafen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wienerhafen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170a9c36765000004030047304502210081a0709374ab62cf9ec6cb4a179c8e9a634bf48641dabb2e758949ce746fd0310220202a5c092bbe7ffb37416f32137ee3b68df70aa117c4b45da0ed78319bcbed45007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a9c3676200000403004730450221009af9c56848998feb38a4fade6ba4400c7cfc827a2547c6ee60f7fa8dea089e9102201640b6960430222201bfb59c32cdcd54f4957cb78c0c78200da0a10c1fdced49
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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