s-pass.at

Issued by R3

About this certificate

This digital certificate with serial number 03:f0:e7:c8:5e:a6:93:d5:10:b4:c9:fc:53:bf:e1:97:e0:36 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=s-pass.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f0:e7:c8:5e:a6:93:d5:10:b4:c9:fc:53:bf:e1:97:e0:36
Serial Number (int): 343312717902448123300409137613461018632246
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 55:64:e6:de:4b:d6:a0:42:3c:b7:ce:2e:9a:e4:73:06:6f:17:7a:e3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2f:1d:69:43:85:17:22:0b:02:be:63:14:ea:a9:de:2a:d3:14:37:9e
Fingerprint (sha256): 70:14:3c:fb:f9:e0:73:34:8f:c5:61:4e:cd:23:9c:01:77:4f:91:4e:7f:54:fd:95:bd:08:dd:fd:35:5e:43:25

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate s-pass.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s-pass.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s-pass.at
www.s-pass.at

Other certificates including the domain name s-pass.at

(limited to 100 certificates)

Certificate

The complete raw certificate details for s-pass.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343312717902448123300409137613461018632246
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-30 00:16:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-30 00:16:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's-pass.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 923178588529185427235183023306385189918914956181439789483435877836442124171373745199471065727314232564548758873051304376994690100758004225483410515867563642597968107607707382214238830451060060973328783014439751302890432387856162748873599586707189434402788013866802273115690089177877861775393002588049251622633134055899938574972630723568253690611568934383324339336059428646655015081414049860056873346059372273617763591497964942149910075043927390403661478957018250536510261264484251511200418827128359056997387484746371819525174092015459506844624496747187064205568458439017993374741101987256829937623972623023419517556058918049952512145071734937990524803536935612712382340883974482569073458011756853416529636522754039863187996464570152438775222427735191584253255364327484892307075467347006194251677479699187450592836467049105806705391914654940964473228270623274326545018824518704142143606691946800155250740319827462160042714878746660999136966711762838161951766900164911253431537541660156901095957926903208796048707292024832804515424458967428669472547098220574635067094107320762766682001385891742634248886594608495613807739829622842398195362187304423602138384892861081782470863414325259480941786955663582471249334935260606631250743432477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5564e6de4bd6a0423cb7ce2e9ae473066f177ae3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's-pass.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.s-pass.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000176b13806e700000403004630440220740befacf756c5cd131407757ed766bd7ec60d682b6b09309be2ea2311565df702201bc7f891d4b54d6f952b6beb17e7bc81a5ededda7d7ef5828f520dc685f000af0076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000176b138078d0000040300473045022100a1b5b6aad7abf693ab62ecb24c5147c7e2f88cacbb9fa2758506c231645efc9302204287afec4e6fb970039df5e3374022798c1152306abd849e7c61278100c9360b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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