dominonews.at

Issued by R3

About this certificate

This digital certificate with serial number 04:b2:f6:6b:09:ef:51:ca:c1:ac:8a:09:f4:a4:d6:ca:00:10 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dominonews.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b2:f6:6b:09:ef:51:ca:c1:ac:8a:09:f4:a4:d6:ca:00:10
Serial Number (int): 409346950903197516291451686963724254052368
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 43:c2:8e:fc:65:e7:c2:0e:5f:1b:cb:06:a4:ee:75:cf:78:95:f5:67
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e6:f3:6d:37:80:4a:06:1d:d3:06:1c:a2:67:9b:6d:c2:2b:42:8d:cb
Fingerprint (sha256): 71:0c:5d:c8:67:0c:f2:37:a2:3c:bd:53:57:f9:49:29:78:99:cf:1f:40:30:b2:91:cd:d7:a1:1a:41:14:35:04

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dominonews.at

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dominonews.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dominonews.at
fizzylife.com
lifeisajungle.com
nyclovestory.com
pimpmyaxe.com
www.dominonews.at
www.fizzylife.com
www.lifeisajungle.com
www.nyclovestory.com
www.pimpmyaxe.com

Other certificates including the domain name dominonews.at

(limited to 100 certificates)
dominonews.at
dominonews.at
dominonews.at
dominonews.at
dominonews.at
dominonews.at
dominonews.at
www.dominonews.at
dominonews.at
dominonews.at
dominonews.at
dominonews.at
dominonews.at
dominonews.at
dominonews.at
www.dominonews.at
dominonews.at
www.dominonews.at
dominonews.at
nyclovestory.com
www.dominonews.at
dominonews.at
nyclovestory.com
www.dominonews.at
www.dominonews.at
www.dominonews.at
dominonews.at
www.dominonews.at
dominonews.at
dominonews.at
dominonews.at
dominonews.at
dominonews.at

Certificate

The complete raw certificate details for dominonews.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxORp6fiYNfZZv7rUyrgm
xL0YwLV3TnGMDdlzMI19rmjYYqOqrm+7SnqFH0W+DbxrC8wns44Guqzlqz2A7IhP
KuMF1BPgSZH6P1HEDjLSDMpcyQMsYva0STKGY8yiJGf4fNKViswRVoB4ZiFiz7G3
bIkMc9i/8nKT7IcxE7yIr5WTrz7Unt0XlCasj4r0nrwbb1QPF68vEO6Iqc7sINf4
RTjx8hmG0cZCqsQsCY32E+nFz2bJofGfxq/TLmfWrWc1cMxyRCXAfVoguum/hsx3
g253JkWUaz79nTBp7uPL7cF7j0ld2evXpX93uAMv2iapEghkgbnjrzEjAAb3Jzht
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 409346950903197516291451686963724254052368
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-28 10:47:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-29 10:47:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dominonews.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24855342779782370377917152340143123641398341890318526553577747565464098469682264905817850110677705864548183714181151145096470935813651956992090352160477055995144212356224106999586292508963087868137624240177013001048281283775967087173589412840870835880234510035537485465897570362017802203203314833152739029981048474821733160989845580331103087808292074532240870056501106040866610786802192701383017396763685675784997623338028212653285448646448109035830661807212358956943008545527501897049037491057491185691752039412311600288686606358926302830601097523181009739325194743170576738637746385501010655364612833807123269315991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43c28efc65e7c20e5f1bcb06a4ee75cf7895f567
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (187 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dominonews.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fizzylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeisajungle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyclovestory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pimpmyaxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dominonews.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fizzylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifeisajungle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyclovestory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pimpmyaxe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000177e876e3720000040300473045022100b68b4e55429acd53a2831c82bf156c6afedd28934d0b4352f3ad106ba47ac956022025c47ef72a18031f8c5fc47aab372fe2be0ed551e18c2f40bc1b199d43f07c4f0077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000177e876e36e000004030048304602210091bbcbb0dcc0e47640446d7c9746c15b9d053303fa16128e3bbf13cfa2fc61a2022100be5ba29ef09c15d6b0e0f80c4453613722928871184dd54084a5443535922f94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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