sontag.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:3b:2f:db:d2:1c:5d:0f:62:3d:0c:72:9d:d2:54:c3:d2:26 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sontag.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3b:2f:db:d2:1c:5d:0f:62:3d:0c:72:9d:d2:54:c3:d2:26
Serial Number (int): 368589418465743472125080760414029278859814
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2b:94:a4:bf:d8:ae:51:11:22:e4:9b:18:d4:ba:52:ea:33:f9:e1:74
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 38:a8:b9:b7:b4:ef:b9:08:5c:2a:13:2b:7a:09:b0:db:bd:bc:9b:1d
Fingerprint (sha256): 6c:08:e5:43:77:2e:39:37:9f:17:94:07:21:57:12:09:2f:60:3f:60:2d:98:0f:83:9c:77:c0:88:4f:4d:d6:3f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sontag.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sontag.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sontag.at
www.sontag.at

Other certificates including the domain name sontag.at

(limited to 100 certificates)

Certificate

The complete raw certificate details for sontag.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368589418465743472125080760414029278859814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-03 07:02:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-02 07:02:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sontag.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 912911157418217410314977284239192790311352023497366307324863082009994430719952642307100142550500893188037834924012424238206423302775209693029397082321748293393529248273008263536385755246525533057045863824133726811299583265318589108102125843211535734902159954440216286386807071408726563215923285052932115364401090121524350903551905199900078452005362142861585027511098758003310161404628760183622322548275886720626782982132747186081066660447600455809688603086581763041051873877569498685911758964439705820596385680655129441096608045562083296713524474686067643904922215244239218012182312924632780503124001578703350066408484530892894699288771296133406349317935490442256766182345136415194038115669987003989690030357124286543309332112436233557774288363564356998234654863740635689056463337633664855915371876599295615785997092231500587141972418475025307007259794084454009446124759117668824197746791846564711549857229529976491136606409267192905222189816559546177387554509600152727446151506520313139631865652085341261034669513462709280592064375261419923428581484556949570300250631102171603586161518605131365583024470177738745628550951336079737862457936911869105183721612773177717563787617536767939770815675284083534082932630381983878695200907329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b94a4bfd8ae511122e49b18d4ba52ea33f9e174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sontag.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sontag.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000169e238a74c0000040300483046022100f00ff00ba77b1f8babe221200719ae3925d9e0f7caa4e3870abfa275a670bb25022100b4aab6397cd440e3cd8f50d8373778e9261c4df4d109616c4524b895c01a41d900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169e238a7100000040300473045022100ed4b63a273c05b393d013e86a662c6cc10c07cfc112d0b4bb513d0e07faf0cd40220054b2942550f52a5258ba4bcdb7d82c0463f26366018da8904e53cb9829d0d40
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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