www.firlefleisch.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:7d:1b:b1:2e:0a:e1:73:9f:25:c6:78:06:8c:9d:14:cc:98 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.firlefleisch.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7d:1b:b1:2e:0a:e1:73:9f:25:c6:78:06:8c:9d:14:cc:98
Serial Number (int): 391021248718441345210827719322725239803032
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ae:4b:57:fe:71:1f:d5:74:cd:ab:45:7e:be:ef:00:bf:b5:f8:35:2e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fd:07:c4:eb:8e:2e:32:3c:b2:f8:e5:b0:4b:29:72:22:31:99:e9:e8
Fingerprint (sha256): 71:8e:01:30:58:e0:7a:1b:37:25:e8:7a:ec:04:23:4d:20:e3:0a:f8:e2:8a:4f:33:c5:86:de:41:1e:64:e3:b2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.firlefleisch.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.firlefleisch.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.firlefleisch.at

Other certificates including the domain name firlefleisch.at

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.firlefleisch.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391021248718441345210827719322725239803032
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 00:58:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-06 00:58:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.firlefleisch.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 973680129273944388675812632952271450702826961248434770275255602953751858517469745058811809757773799258288144238065359730738444376868655035523488537126749983405466395242337527403792978431071451315510069976997732653782404996546429598194682486220338520244506955391180571466487515056005273611471365211686388568235511724650188796869833852973432074602780832798589531662491787528175621018286949622054334336475655023973416336856332625386734128169117894344398905430211475538336635529968018282040999167497275131562177873274048767260121461896926025637110406887585911260891842054212135182552446152802240714368005345760823040861352854567919092178377011535321629084043796853129559670007388373807707895620817573367176472181623571760663139158217522763006042929110678862015420876577476668622894149792361158190511665643442366506227961789471760906961919492568454403791655748431657254611539757352783808208177406443327197970771458975418163586795067457823740905583080303632765521566519529366546106416940803192924485560227615453012660640637000083316102763039700860232253338074649242243059470598337713620049230780076741834755611371927377315904280229079798073840261949646334210122170405193696301502684470897386594620028904524378926108573216531371117209146151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae4b57fe711fd574cdab457ebeef00bfb5f8352e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firlefleisch.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168bb60d5e60000040300463044022030f37f100fa7e265c5df01e25e3abd6eea66f1d5843c242fdebb6ba4b33ed39f02204371c183bc2e8287789c1bd477706224213a0bba6c9f1780e3782d06911700fe00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168bb60d5de000004030046304402204edd0961250bb9cf5f323414db4ce313615178dbe5d7477b7947d0b86b94dfe402204402fe28e7df0116aebd7190b2fc733d2a9a287c09352c4daa87690827b36da0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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