analytics.igha.de

Issued by R3

About this certificate

This digital certificate with serial number 03:79:69:4c:3e:db:fb:bd:c9:47:d7:74:27:28:c9:cb:3f:26 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=analytics.igha.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:79:69:4c:3e:db:fb:bd:c9:47:d7:74:27:28:c9:cb:3f:26
Serial Number (int): 302650989021771232024488122023675698036518
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 41:ac:5a:a9:ab:38:f6:be:d3:dc:8f:c5:d6:e1:c9:ba:97:dd:a8:fa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 52:bc:d4:9d:2e:fc:ff:d5:7b:76:21:ea:0e:e7:51:8f:55:85:a6:ec
Fingerprint (sha256): 70:e8:f4:0a:b6:e0:64:46:4c:6b:89:ad:9e:e6:04:a7:fc:2a:9c:04:b9:e1:a5:d2:d8:85:56:bd:c4:02:f0:cf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate analytics.igha.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for analytics.igha.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

analytics.igha.de

Other certificates including the domain name igha.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for analytics.igha.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302650989021771232024488122023675698036518
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 02:31:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-19 02:31:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'analytics.igha.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1003231981385338862544670792032295580725545179606944184122632355266166818781745333936123493922667696193150229854125431770575968329011666272981206231801129280710012192866155299954541453567909989586667151362136533167502731356682139785178986122443042377826869799761626362350585344241650370557287397653405970831220280399822788675156872777697406441108722164983522873707746547606760365997939525045482218634468481489960094717208242848983614623756389200534886789711420358849680810918268978579092574511974578101618632909323053646186797888165844883897166240262990900681623454136526058534985331270205583392928961387215495833623918239434337733186893136621513685635650567999414377271205508771138634676701239759603126591803934563580532451534423548972714358960628116044380280984481493069250000048245647813036629980227828766278187592270256444612595737810786296020420317890650875417579529739531091753232236356063844234968070662815176338898803333248820152153168496558521837341058925730918397723602321011828457268893153540043260383683273195851549268217791240895940175742529265205807698109417030987424898766763795567876057787682596800046677080240837688416364154587680308046784724327465655055108968599150698073955637347099065787270261827507988788645186879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							41ac5aa9ab38f6bed3dc8fc5d6e1c9ba97dda8fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.igha.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dbf6ada95000004030046304402207b796e1bc2645098339c1895a43600b58c3f7b56038762d0e1f727fffc1a4e5602204bd01b595dc3eecfe173df3a76bffbadf8dc5a01c7a4641f98c22befcafa7a0b007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dbf6adb4d0000040300483046022100b509838d1c047814d05a12b769715d661426a8997430a415afaee33753ae033f022100a2e9df324909e12a4c47a1a811c17f6743de53129360e66b1e5d5087b46bf950
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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