www.ahk-baku.de

Issued by R3

About this certificate

This digital certificate with serial number 04:eb:61:86:b2:03:9a:08:15:c8:93:ad:81:85:70:3f:81:48 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ahk-baku.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:eb:61:86:b2:03:9a:08:15:c8:93:ad:81:85:70:3f:81:48
Serial Number (int): 428545134447385970410291381919868981838152
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 24:ac:19:d6:b6:33:50:9d:a5:06:d5:f0:4a:83:a9:dd:cd:01:46:ea
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ff:9b:76:ae:f6:15:b7:af:90:fb:5d:36:47:f5:6a:1b:5b:ae:56:84
Fingerprint (sha256): 71:7f:d3:ea:42:0f:c1:c1:01:f0:63:a4:8a:b9:c7:39:81:97:59:28:ec:ee:a3:e3:dc:05:9b:cc:28:3e:3e:1a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.ahk-baku.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ahk-baku.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ahk-baku.de
aserbaidschan.ahk.de
www.ahk-baku.de
www.aserbaidschan.ahk.de

Other certificates including the domain name ahk-baku.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ahk-baku.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuyWhYw00rrlM3Iy8uYRn
HN1j8Mz8d+U/4vW4uCeq24hHOpcgkeZS6/pR9kSdGSQ1qDqMG9lX7yuxhxiccT2A
FFO3VG395RdyLB3EnSNLSr8JsHhxHFyJ66FGQ2bamRyR+B/Kse6yJzyGoq5/ANI2
SveSgkrOVre8C3931o4yXFn1Uio7eaW6sYbzZMRrXJJLFC6MWuV/VJDNoLHZ5w8Y
nySJCfvVZHZB2qzBhvgbgx2x7QvzMOHy9I0M5qNWzfHFjGegHPVPRBR0mGKCtUpJ
UYm7vjdWvygMJ/oDegP0QlyezVKC/Zf5mACGeVHFoGsqcIk6kRzXtNfvs5bh7vs+
NBzBxOdfK6Py0qT1fnabuxDR7CPaAk+iWfaaxtBcRpUlcuuQ/ULRKSxQoT0dmi0l
BuTUbIZ5X3B2NC8Wr5+qZS/Xu3fIKUoUTQn2ruYvq3aBi70ec7i74XHQLyN3iIBz
U2EF+1985/JQDVtsTkxhN2qoPBsCYMRfz4SuaIwm+V1GMJEB8iQYsqA7ZeJKk4PE
rRLjsoy+KQWlKR7oygg5sfaxNlfG4VdrnJ5azf5v2EvARft7dxATL/2DmNzFB9uJ
1k+q0GJDDNy4nRCoMeokSmR3Gg3WztI5Qd1ftH5PlMA19c5jcHaMwXjeUJDtMcsw
32pwNk8peTjbR0M7XcXtUDECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428545134447385970410291381919868981838152
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-22 13:50:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 13:50:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ahk-baku.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763493123181375049795319467053351603895544393418603648997903880481332033018089459676075340208128422285946799626989077533918902641006014736260944578806158251441289965739201554776706411820312947733440494759137969470015761567958221978057380981755132718854236221349355320293919685414487687353810073805471194602942889507352777707569780447048131411240094642838602688175913610503087903081019923490873740265542637244594837374098698098723817717674306933799801680658400645229366639776546180266634766174050950735505970472683116774339285613260341601588677028850264001526539825242099197553903583845407413448517222509344886023095460061391672910450583129936861870407945172814140757681835783694419296731772741890975931947795296390746266913051390729015557582460221494231854208724764445622663860817374292787759844917059460257438598399694787047992909722392063608970326846055295467326518395030248710694479226252968272865234282508578628638741106622558827507075023459431799118505604805315956416507704089387222438968411669542586787070362019971396214087272434786804345210607864684831853110422999197633351708140138429149850900297845987174064897026499875958652441934407072919738255806564020595988962712825591395462007599816465042233875417314459685976871358513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24ac19d6b633509da506d5f04a83a9ddcd0146ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahk-baku.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aserbaidschan.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahk-baku.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aserbaidschan.ahk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a1db9ab890000040300473045022100d235c0346e74f62adbaafc5605c206f3667d950f59f78662fa8403817ea98fba022023063fa5affca86071f61aee450a01cb4e78a7c1ed4b2c2440ef4d4901d8c632007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a1db9ab690000040300483046022100bc0ac4afb2bc51a16c6d64f10691f0860a2be1ec6080aa0b9b062045c6a973800221009b82e9db321649efe086039e3ae1636231a26057266aef5ea7bc58014949a462
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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