analytics.igha.de
Issued by R3
About this certificate
This digital certificate with serial number 03:79:69:4c:3e:db:fb:bd:c9:47:d7:74:27:28:c9:cb:3f:26 was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=analytics.igha.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:79:69:4c:3e:db:fb:bd:c9:47:d7:74:27:28:c9:cb:3f:26Serial Number (int): 302650989021771232024488122023675698036518
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 41:ac:5a:a9:ab:38:f6:be:d3:dc:8f:c5:d6:e1:c9:ba:97:dd:a8:fa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 52:bc:d4:9d:2e:fc:ff:d5:7b:76:21:ea:0e:e7:51:8f:55:85:a6:ec
Fingerprint (sha256): 70:e8:f4:0a:b6:e0:64:46:4c:6b:89:ad:9e:e6:04:a7:fc:2a:9c:04:b9:e1:a5:d2:d8:85:56:bd:c4:02:f0:cf
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate analytics.igha.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for analytics.igha.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
analytics.igha.de
Other certificates including the domain name igha.de
(limited to 100 certificates)
www.igha.de
igha.de
igha.de
analytics.igha.de
igha.de
www.igha.de
igha.de
igha.de
analytics.igha.de
analytics.igha.de
www.igha.de
www.igha.de
analytics.igha.de
igha.de
analytics.igha.de
igha.de
www.igha.de
analytics.igha.de
www.igha.de
www.igha.de
www.igha.de
analytics.igha.de
igha.de
www.igha.de
www.igha.de
www.igha.de
analytics.igha.de
www.igha.de
analytics.igha.de
analytics.igha.de
www.igha.de
igha.de
analytics.igha.de
analytics.igha.de
igha.de
analytics.igha.de
igha.de
igha.de
igha.de
analytics.igha.de
analytics.igha.de
www.igha.de
www.igha.de
igha.de
analytics.igha.de
www.igha.de
www.igha.de
igha.de
igha.de
analytics.igha.de
igha.de
analytics.igha.de
igha.de
www.igha.de
igha.de
analytics.igha.de
igha.de
igha.de
analytics.igha.de
igha.de
www.igha.de
igha.de
igha.de
analytics.igha.de
analytics.igha.de
www.igha.de
www.igha.de
analytics.igha.de
igha.de
analytics.igha.de
igha.de
www.igha.de
analytics.igha.de
www.igha.de
www.igha.de
www.igha.de
analytics.igha.de
igha.de
www.igha.de
www.igha.de
www.igha.de
analytics.igha.de
www.igha.de
analytics.igha.de
analytics.igha.de
www.igha.de
igha.de
analytics.igha.de
analytics.igha.de
igha.de
analytics.igha.de
igha.de
igha.de
igha.de
analytics.igha.de
analytics.igha.de
www.igha.de
www.igha.de
igha.de
analytics.igha.de
www.igha.de
www.igha.de
igha.de
igha.de
analytics.igha.de
igha.de
analytics.igha.de
igha.de
www.igha.de
igha.de
analytics.igha.de
Certificate
The complete raw certificate details for analytics.igha.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF7zCCBNegAwIBAgISA3lpTD7b+73JR9d0JyjJyz8mMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMTkwMjMxMDdaFw0yNDA1MTkwMjMxMDZaMBwxGjAYBgNVBAMT EWFuYWx5dGljcy5pZ2hhLmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC AgEA9elhhzoepw6uRIvuMPBY+zGX98hRqRdqZyb+NP4y8AMhqp2O7ICdUmbnPoQC jQ4YboByltiVsKPpb7sBpDo1WczfcPtsnJEetDz0evMmzxRpvzaCN2MgEQweGfsh De9jKcIEM99msi83g9CrUtsCD+98r4IL6QkWPWsEpMLNzVCqryp41lHGPKjqylmo THrQL0/DEf/cdoFoZuFCVcdiQLAofpjvegOG+r7jIzvP8lZ5+txjQlB/hfdol2r+ tDAERzcQzuSBdQp3Q/4MShN31E4pYQi1E+/BodhzBAo7XEprnF6IZRXcW/1fIPGq ProGJJtEe98PZ2DEP03GuWFGWWuutpH2tj0Rpjc4jwcSWbgGmE6pT96x4wg7RsUx QmHwXFrBBnFZCH8pakPPVJYk1EsgOGvpCbTX6LmABlOj3Rm5z0VbFIKCE7Lp0pIA s7XvUywPFaDAoMmn9aflbFo7ivVAC/V/oVMkDHkp6iLVa8MD1r1bTfvGCnIDB+9p XF3bTXQIq187pOPyaLuP7KX4hRYZwmEFG3UraIuI62aBHoKUo7IjJqoQk6+MS4wG Yt5TOQ6U48ok+3uFT1Q25eAD0AnZuoHRp4K5a0jtx2TSvPIIAUlEfHCU4a4BKJG5 tM0tyTbi6kv7jSC3LCzPmdF93zyVfmS33zMKDW4cm6A/zT8CAwEAAaOCAhMwggIP MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUQaxaqas49r7T3I/F1uHJupfdqPowHwYD VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0 dHA6Ly9yMy5pLmxlbmNyLm9yZy8wHAYDVR0RBBUwE4IRYW5hbHl0aWNzLmlnaGEu ZGUwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA dQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY2/atqVAAAEAwBG MEQCIHt5bhvCZFCYM5wYlaQ2ALWMP3tWA4di0OH3J//8Gk5WAiBL0BtZXcPuz+Fz 3zp2v/ut+NxaAcekZB+Ywivvyvp6CwB3AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i 2reK+Jpt9RfYAAABjb9q200AAAQDAEgwRgIhALUJg40cBHgU0FoSt2lxXWYUJqiZ dDCkFa+u4zdTrgM/AiEAounfMkkJ4SpMR6GoEcF/Z0PeUxKTYOZrHl1Qh7Rr+VAw DQYJKoZIhvcNAQELBQADggEBAIxUxLXGqIVNsfya5Y2GmKW6tZv9x6XFfwa4SkfI SkyIA8WSjXyojM3LLWGlChPhuRGstfPiXf2+ZNIjyDHnNh1lJ31pfrnro0wzhF/c 8ShZydZ7l9oW+Ba+6uzUtIw40TRaJy7+CuHzpIEEdk57uj0ifwYGwZwpJau7Bl6x 2KTUNfIo63v02YAcYP9K4JbR/Frws/IH1mIqkvPszm07hh4Jz3eW+Tv3ltMGMF/d C+PincVvNj9hxhHWs416b0GVpTiQwLyLjpteqW+5xRmHhaxco+DG6kNJq65BQGVe /if9xrDvFW9+IEXKReB0EVxiWudmg8vbRT3AztEAKzyJxkw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9elhhzoepw6uRIvuMPBY +zGX98hRqRdqZyb+NP4y8AMhqp2O7ICdUmbnPoQCjQ4YboByltiVsKPpb7sBpDo1 WczfcPtsnJEetDz0evMmzxRpvzaCN2MgEQweGfshDe9jKcIEM99msi83g9CrUtsC D+98r4IL6QkWPWsEpMLNzVCqryp41lHGPKjqylmoTHrQL0/DEf/cdoFoZuFCVcdi QLAofpjvegOG+r7jIzvP8lZ5+txjQlB/hfdol2r+tDAERzcQzuSBdQp3Q/4MShN3 1E4pYQi1E+/BodhzBAo7XEprnF6IZRXcW/1fIPGqProGJJtEe98PZ2DEP03GuWFG WWuutpH2tj0Rpjc4jwcSWbgGmE6pT96x4wg7RsUxQmHwXFrBBnFZCH8pakPPVJYk 1EsgOGvpCbTX6LmABlOj3Rm5z0VbFIKCE7Lp0pIAs7XvUywPFaDAoMmn9aflbFo7 ivVAC/V/oVMkDHkp6iLVa8MD1r1bTfvGCnIDB+9pXF3bTXQIq187pOPyaLuP7KX4 hRYZwmEFG3UraIuI62aBHoKUo7IjJqoQk6+MS4wGYt5TOQ6U48ok+3uFT1Q25eAD 0AnZuoHRp4K5a0jtx2TSvPIIAUlEfHCU4a4BKJG5tM0tyTbi6kv7jSC3LCzPmdF9 3zyVfmS33zMKDW4cm6A/zT8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 302650989021771232024488122023675698036518 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 02:31:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-19 02:31:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'analytics.igha.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1003231981385338862544670792032295580725545179606944184122632355266166818781745333936123493922667696193150229854125431770575968329011666272981206231801129280710012192866155299954541453567909989586667151362136533167502731356682139785178986122443042377826869799761626362350585344241650370557287397653405970831220280399822788675156872777697406441108722164983522873707746547606760365997939525045482218634468481489960094717208242848983614623756389200534886789711420358849680810918268978579092574511974578101618632909323053646186797888165844883897166240262990900681623454136526058534985331270205583392928961387215495833623918239434337733186893136621513685635650567999414377271205508771138634676701239759603126591803934563580532451534423548972714358960628116044380280984481493069250000048245647813036629980227828766278187592270256444612595737810786296020420317890650875417579529739531091753232236356063844234968070662815176338898803333248820152153168496558521837341058925730918397723602321011828457268893153540043260383683273195851549268217791240895940175742529265205807698109417030987424898766763795567876057787682596800046677080240837688416364154587680308046784724327465655055108968599150698073955637347099065787270261827507988788645186879 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 41ac5aa9ab38f6bed3dc8fc5d6e1c9ba97dda8fa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.igha.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dbf6ada95000004030046304402207b796e1bc2645098339c1895a43600b58c3f7b56038762d0e1f727fffc1a4e5602204bd01b595dc3eecfe173df3a76bffbadf8dc5a01c7a4641f98c22befcafa7a0b007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dbf6adb4d0000040300483046022100b509838d1c047814d05a12b769715d661426a8997430a415afaee33753ae033f022100a2e9df324909e12a4c47a1a811c17f6743de53129360e66b1e5d5087b46bf950 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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