www.gemnova.at

Issued by R3

About this certificate

This digital certificate with serial number 04:56:a0:60:b7:82:f7:70:8c:61:37:c9:cd:f4:a5:d9:74:a1 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.gemnova.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:56:a0:60:b7:82:f7:70:8c:61:37:c9:cd:f4:a5:d9:74:a1
Serial Number (int): 377926605944122897782615144593998661383329
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 04:b8:e1:ce:20:83:c0:e6:14:c0:c2:04:76:22:98:76:fb:d9:98:6a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 59:d8:cd:5f:ad:26:10:3c:4c:ef:0c:f8:cc:24:c3:76:9a:8e:0e:d8
Fingerprint (sha256): 84:f7:bd:57:c1:cb:bc:0c:04:b3:12:61:2c:95:d5:ad:20:31:7d:9a:36:88:ee:44:33:19:ce:c2:82:b1:b3:81

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.gemnova.at

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gemnova.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

einkaufsplattform.gemnova.at
gemnova.at
www.gemnova.at

Other certificates including the domain name gemnova.at

(limited to 100 certificates)
www.gemnova.at
www.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
www.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
gemnova.at
seminare.gemnova.at
cliq.profitroom.com
seminare.gemnova.at
www.gemnova.at
www.gemnova.at
ferienbetreuung.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
gemnova.at
gemnova.at
www.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
chat.ethos.ltd
cliq.profitroom.com
cliq.profitroom.com
chat.bamero.de
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
nextcloud.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
www.gemnova.at
www.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
ferienbetreuung.gemnova.at
ferienbetreuung.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
chat.podmanagement.co.uk
cliq.profitroom.com
chat.zukunft-digitale-bildung.de
wiki.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
wiki.gemnova.at
www.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
cliq.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
www.gemnova.at
chat.ethos.ltd
cliq.profitroom.com
akademie.gemnova.at
cliq.profitroom.com
server.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
www.gemnova.at
chat.podmanagement.co.uk
www.gemnova.at
cliq.profitroom.com
server.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
wiki.gemnova.at
cliq.profitroom.com
cliq.gemnova.at
ferienbetreuung.gemnova.at
cliq.profitroom.com
www.gemnova.at
seminare.gemnova.at
cliq.profitroom.com
chat.bamero.de
meine.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
chat.mobility-bi.com
www.gemnova.at
chat.mobility-bi.com
chat.zukunft-digitale-bildung.de
cliq.profitroom.com
collabora.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
www.gemnova.at

Certificate

The complete raw certificate details for www.gemnova.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377926605944122897782615144593998661383329
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-02 23:40:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-31 23:40:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gemnova.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856795674250861176021408491729766536513088317306678229108381490072763213069223878054344973902611206139692159001466612252026715488649331790912149539089887184216579855884342829127224169768821338659643049430431584466983869630120384009473753344314441820261713467324013014560495546208209094118049713407605679598630200506101280182958410219239565981456701134780318738530179095437848845496336571048884551920129301717320974748301389208106895868307691010968970924996988687000984029043371359442273453691824805042268455160353687115494766835638436034457101389736171717315979590866969885222252591610154924683850799961258094482664469778130303446339245002195097126438646275886466907772518674331286596884488670359259713006282121465313278710346442514071664124887175420109845139893787065794585532909854720428745397451248849548771529156955600579901813525948458240870202303820881130134797631031423802850991633805064631786919092168676844236420375203419194149483470637666578840405590822617334785074701815558959426581105201355011967059252888841542896956849900574467066807736482440112671682526075384873133434172097924602204725874207342413005780572309304136177988891600737180353640872023119642749290269699800071386765974110739379737330705771255976543416856627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04b8e1ce2083c0e614c0c20476229876fbd9986a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'einkaufsplattform.gemnova.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemnova.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gemnova.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fdb8aaa040000040300483046022100d119b84cedf3124cabc7f7c76c666acba81a18895a586fba22d6862b2bfda36c0221008040c7f13d1f418af8d9171d621897c955f9665d609ce5a4718fedec27d91626007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fdb8aaaaa000004030047304502202bf2700acb6cfe1d6784887e5fe9e94ee057aae323d7a3cf8a7c0306436b1425022100f49ad13dfc211da9b2426b8b06efda9af20a8142540d3705a5c432004e126152
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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