www.hafen-wien.com

Issued by R10

About this certificate

This digital certificate with serial number 04:a8:26:96:d9:bd:a8:be:0b:25:76:42:ee:24:39:bc:3f:fd was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.hafen-wien.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:a8:26:96:d9:bd:a8:be:0b:25:76:42:ee:24:39:bc:3f:fd
Serial Number (int): 405667875294436485413458393331807681265661
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 18:48:fe:28:7e:99:51:08:15:ba:9d:4e:84:35:38:5c:a7:59:55:bf
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 1e:83:78:4b:94:aa:b5:bf:a2:87:66:0f:99:7b:f9:f3:1a:02:16:e9
Fingerprint (sha256): 6c:5c:5b:08:e2:08:ea:69:71:2e:10:10:e1:ae:3f:16:0f:ce:34:41:f7:02:c1:21:a6:65:1f:62:4f:8c:dd:c6

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate www.hafen-wien.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hafen-wien.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hafen-wien.at
hafen-wien.com
hafen.wien
hafenwien.at
hafenwien.com
wienerhafen.com
www.hafen-wien.at
www.hafen-wien.com
www.hafen.wien
www.hafenwien.at
www.hafenwien.com
www.wiener-hafen.at
www.wienerhafen.at
www.wienerhafen.com

Other certificates including the domain name hafen-wien.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.hafen-wien.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405667875294436485413458393331807681265661
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 22:06:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-16 22:06:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hafen-wien.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 971455515769267525194383905639136391244965940728830904229321869032137864002679765786123447139787900238853602568813690422874864081537311198477445961289707460897103408246168412578566499417040901534078192831219171260927266785106118968302897518155220989543161360967899882693335962501815112887872329158756231779857606350505637742082295591030152023543732579830891335990815208219400127784530599574218557847297016217207067638041038086985887162645864949200665338424688617613399798940511081662311717447238619307888700718007691992114471057061387608600821166226079413538855441418933039639936607789447990469335958377541776203629315662999597313242986758289162998191498778542726967846184670040949663342442284942638178895973570199159256414002154432811158682672079269984023338525972419935928003957460287287919853275919606897462492169891845365487241977979555804725920335384184681597550701759687998788999316287583307546301620567059631638245571850472672858459306595999873555386469316081072146318147767254152729100895950236853163908044441696829800242214326084387200747067614397543657856054763655884941076833721995920679022038102750602908180400873728968037863701479858608351105619666490285825234887153064162990661568682617265555579008482292068665173979911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1848fe287e99510815ba9d4e8435385ca75955bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafen-wien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafen-wien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafen.wien'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafenwien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafenwien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wienerhafen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafen-wien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafen-wien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafen.wien'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafenwien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafenwien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiener-hafen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wienerhafen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wienerhafen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001902d9a618d000004030047304502207b66d0e51b3c3041ce013c66f558ed1c7314ed35e0bf828efce99dcbb9f6e6ce022100d6f5e2a058b958891d7a0e9fbb182d67d7b162829161dcf9eb7495272e02c7a40077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca000001902d9a61940000040300483046022100f541cb5d9c63627a963282c68a2280a2186d6f613802ee2429a7f1da35b1f10a022100b367cb4cbff96e66a8da159f6744888157a09746e91babe17b195ee10cb7d703
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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