www.hafen-wien.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:69:ec:2e:28:19:96:9f:cf:a6:5b:20:90:b8:57:46:bf:bc was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hafen-wien.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:ec:2e:28:19:96:9f:cf:a6:5b:20:90:b8:57:46:bf:bc
Serial Number (int): 297380443787963715511802776918697563307964
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 09:25:15:b8:a0:d1:55:bc:4b:47:3c:40:aa:bd:3b:b6:99:c0:bc:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d5:83:3e:c0:26:08:2e:2c:39:fc:d0:5c:35:fd:13:77:e3:bf:fd:42
Fingerprint (sha256): 82:79:eb:79:d2:73:26:94:ed:6b:e9:58:81:ed:78:86:3e:c8:b3:f9:8a:66:e1:55:32:24:e4:a6:0a:88:a1:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.hafen-wien.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hafen-wien.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hafen-wien.at
hafen-wien.com
hafen.wien
hafenwien.at
hafenwien.com
wienerhafen.com
www.hafen-wien.at
www.hafen-wien.com
www.hafen.wien
www.hafenwien.at
www.hafenwien.com
www.wiener-hafen.at
www.wienerhafen.at
www.wienerhafen.com

Other certificates including the domain name hafen-wien.com

(limited to 100 certificates)
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com
www.hafen-wien.com

Certificate

The complete raw certificate details for www.hafen-wien.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297380443787963715511802776918697563307964
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-18 06:58:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-17 06:58:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hafen-wien.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800146498261325981815620723775396270277593412357661958582770456063876045658437016996787842187584667518570012133213734627748934135732952794317463327313981058699672572205785136275471036129787035344883591885790844579336453779421470804820952745610252815770176058205814774962226739427679941254256191964460262238675594816854907167361092614042512528488163146856512519859756351687791019825109150269237114715277689809401617544627198866966645674764423949336440614810231790149460324821179594779114094041500422835348640198305312048233210111465136433966666506766833537272224196389161844749501841837941321906194916932511905504990666506638856549095642139672059494852278369869190760034747185614410946829488340366187777730340128311995204810713286622348041818128640845254246521447882603785109315994298300720956210105669982229883529594690169648533759040709168823130529463260863219848680732311341334156046689834405079021984931052819707654547427255077350608123259434217511878988541373976668283444474274532473785314729036542391541307054075183142062941748652279520897388354063739728177615842307322515165984749007988980697010146101127188227684136681116665382884219776502642259132519122366890918884488302878816067052948313870902146377250270055490594806183127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							092515b8a0d155bc4b473c40aabd3bb699c0bcc0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafen-wien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafen-wien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafen.wien'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafenwien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafenwien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wienerhafen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafen-wien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafen-wien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafen.wien'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafenwien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafenwien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiener-hafen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wienerhafen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wienerhafen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d436144740000040300463044022064469b0a2da4ad1e9eae31dd5458616e19f992b4cf499d02a96c7fefa9404570022017a46619af81d52c23134e45e668031fcddf0f2dfcdfcd715e09742d95c75e9b007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d4361429c000004030048304602210081a4240ca26a4e2daaa31a86808ab552b116dfa7d148a07fe82e4ba18b018132022100e9504bb5e863ef64f5e0a263bf531aace18b10367474daec3a95f7e950dbe67a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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