www.hafen-wien.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:97:3e:f2:4c:78:22:4e:6d:d1:d4:22:ac:07:59:ca:22:d3 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hafen-wien.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:3e:f2:4c:78:22:4e:6d:d1:d4:22:ac:07:59:ca:22:d3
Serial Number (int): 312803165422902004819642535165702125003475
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d1:6a:98:bf:1d:03:4a:ba:23:ad:ea:b0:c6:fa:2a:f0:ad:0d:41:11
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): da:60:62:51:e4:41:d8:fa:34:2d:b9:db:2d:4f:b9:43:10:f7:b9:13
Fingerprint (sha256): 70:8c:2c:9f:1b:8d:ba:93:12:1f:24:ad:14:db:d7:b0:a6:a4:8e:89:99:9b:a7:da:e4:d5:1e:e3:14:da:2f:aa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.hafen-wien.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hafen-wien.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hafen-wien.at
hafen-wien.com
hafen.wien
hafenwien.at
hafenwien.com
wienerhafen.com
www.hafen-wien.at
www.hafen-wien.com
www.hafen.wien
www.hafenwien.at
www.hafenwien.com
www.wiener-hafen.at
www.wienerhafen.at
www.wienerhafen.com

Other certificates including the domain name hafen-wien.com

(limited to 100 certificates)
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com

Certificate

The complete raw certificate details for www.hafen-wien.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312803165422902004819642535165702125003475
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-16 23:06:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-15 23:06:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hafen-wien.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745400259452804807688653565827575324255936346180244942132701440687242591527059283547189882324651337911513252549429795414257602799161370628353596311153861686586018481944399017800393678409291776594621243482068822734078457414451607033028952864368330030698269352968733026331545306779394477716309424373881296884395320573545569407897403883559955090478447208978896000474698150049410224773520705926131565262528304671974090626217204025799547206270196329788788705368639128077487986544415124182417744220276196249836645713717826055099740629596736811092043306069722877319142121289158605378834147212539984862478207151244161653877686922077718226414362751106354321632147486329363558551031029269686697403913077031362870468319448922132965440119637859241492940001343352943973761272502101847388145596533133100530001134270458316513600468698541773507493727346385714562563582688774669429476691998145391269412054324907660912206240660297077027996369119874755417339665644181442898939199259084093966626193211938931807108611353144029944343832775723783136609029343960146997405737404392411631623355553476817835996255869385985581995791699935407956515867229830639174169244911838782628092081757316778088682275432220616421733943350989434434102747036801193960872077139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d16a98bf1d034aba23adeab0c6fa2af0ad0d4111
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafen-wien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafen-wien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafen.wien'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafenwien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafenwien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wienerhafen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafen-wien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafen-wien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafen.wien'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafenwien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafenwien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiener-hafen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wienerhafen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wienerhafen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fb0d2c83d00000403004730450220120f8c92187790fd6db9161582b5d9634e33be1068c3a2b6975d93bb7a1401f7022100a579c4c5a4372ef6af10ed524ba535a6a7bd26949b7cdaad59e1e233d2a481fa00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fb0d2ca570000040300483046022100a842cd262abbbbbb97ffaec9e92d26faf3bae8dcfb40149397537371f260f879022100fa1a3ab234c22184ac58f5cca36343a6bd970241edac21886f7d2000b567e6b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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