pnc.at

Issued by R3

About this certificate

This digital certificate with serial number 04:d6:dd:40:99:e8:9d:a5:ec:dc:a5:27:9f:31:70:67:e6:ae was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pnc.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:d6:dd:40:99:e8:9d:a5:ec:dc:a5:27:9f:31:70:67:e6:ae
Serial Number (int): 421563665063827623204403494396878742087342
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7f:37:9a:90:a8:35:9d:76:a6:9f:b9:9f:08:aa:aa:73:e6:36:dc:99
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d7:70:8a:ed:8d:c7:49:88:65:4d:89:85:84:12:1d:21:cd:81:33:d9
Fingerprint (sha256): 68:9d:b9:9f:5c:31:c4:bc:e4:8d:19:1a:a7:87:08:8e:14:45:0d:f1:83:24:9b:95:82:32:d9:92:25:0a:be:8b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate pnc.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pnc.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pnc.at
www.pnc.at

Other certificates including the domain name pnc.at

(limited to 100 certificates)
pnc.at
pool.pnc.at
pnc.at
pnc.at
pool.pnc.at
mail.pnc.at
pool.pnc.at
db.pnc.at
pool.pnc.at
pnc.at
pnc.at
pnc.at
www.pnc.at
pool.pnc.at
pnc.at
*.pnc.at
pool.pnc.at
pnc.at
pnc.at
mail.pnc.at
intranet.pnc.at
code.pnc.at
pool.pnc.at
pnc.at
pool.pnc.at
pool.pnc.at
pool.pnc.at
pool.pnc.at
mail.pnc.at
pnc.at
pool.pnc.at
pnc.at
mail.pnc.at
pool.pnc.at
www.pnc.at
pnc.at
pool.pnc.at
pool.pnc.at
pool.pnc.at
db.pnc.at
www.pnc.at
ws.pnc.at
pnc.at
pool.pnc.at
pnc.at
pnc.at
pnc.at
pnc.at
pnc.at
pool.pnc.at
pnc.at
pool.pnc.at
pool.pnc.at

Certificate

The complete raw certificate details for pnc.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKgiv01eZxCAK+CeWJGW
q6n+zKgtDfDC5atRODTCxGTKn1ivIM7bk0sLwry0dQMgnd4/g232fshYirB4UHWW
mHHkNI1VoHl+94/1qO5SpzOiC15+tcbcaJAqRnvtLx6qxBnUQSkaZSK1koqBfAun
YNfjbz+Eechxa4rkfrS1EWx4BFBpsIuGB6RJPe07qbSOCcTul95SwhrN2om03aG7
t5YoK8PZEjLX0zcq/bIdkEKf9F5xeCuWFhMg5l1N/BxeUUqJo+6CDT4r2aDBz2z3
KPS8qu6/szPEh0L3HjhcQtxONG2LIfSg8/3VL5uIKUBaanvuTyXty62ovhtpPgxO
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421563665063827623204403494396878742087342
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 00:21:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-28 00:21:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pnc.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24320665372834307191196432226029019404604388322042247000201982414976666770600945806715346452522354745638122056367057987239349415104590654003329107415006874239698895999878456227146561761939350201180846287421814179216011538248164743177084890082288793450930029668109447317351389554083245882147780178670920683944422437458192956861192042971343506676701723691772587120081961514288467447013727568240319736320664810239038769000134400214916469968525339792364391148020119219184065992932808921775508489349305303848106051366307885903534417774182998970923828415531184236874289449118870035622943449773660438930153494360024106683933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f379a90a8359d76a69fb99f08aaaa73e636dc99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnc.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pnc.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ded4db253000004030046304402206888ee16b487bb71995c38f90ef1e35eb3618381a5650c8b0bfdc4444bee37b102206d508f80fc40ba9a9fac301e17626aeeb95cfb72c51d330427dd7174c4c166630076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ded4db3f400000403004730450220300673e88678dd732d43951ca45180a4c1f4fedf4e02fb53a075b63b5cc0f23d022100acb71c823c895bac8f6a286c79ab655deb32fc8be9b84d8299b225b56173bfae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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