dev.bloi.mediatack.info

Issued by R3

About this certificate

This digital certificate with serial number 03:f6:fe:2b:4e:a7:9a:88:dd:f4:04:74:09:8a:ae:88:50:80 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dev.bloi.mediatack.info

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f6:fe:2b:4e:a7:9a:88:dd:f4:04:74:09:8a:ae:88:50:80
Serial Number (int): 345384168832832765959448157076766558015616
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 95:f3:f1:f9:df:c4:88:d3:ff:b6:1f:0a:b7:75:88:fa:d9:b0:ba:fb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4f:a4:9b:41:fd:c9:05:b7:1f:ee:30:a6:d4:34:22:9a:4d:23:c7:fa
Fingerprint (sha256): 88:f1:13:e9:43:47:06:8a:de:ab:f7:5f:3f:e0:ff:43:96:40:c2:cc:9e:e5:16:82:57:07:a8:a8:9b:31:cf:f7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dev.bloi.mediatack.info

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.bloi.mediatack.info

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bloi-marienberg.de
dev.bloi.mediatack.info
www.bloi-marienberg.de

Other certificates including the domain name mediatack.info

(limited to 100 certificates)
va-stage.mediatack.info
vonardenne.biz
hr-pro2.mediatack.info
betonzaun-online.mediatack.info
vonardenne.biz
hyvest.de
sternwarte-dresden.mediatack.info
www.zukunft-mit-stern.de
von-ardenne.de
swimb.mediatack.info
dev.zukunftmitstern.mediatack.info
tp18.mediatack.info
vonardenne.mediatack.info
swimb.mediatack.info
bau-outlet.com
sternwarte-dresden.mediatack.info
ihkwahl.kiel.mediatack.info
www.zukunft-mit-stern.de
va-stage.mediatack.info
tp18.mediatack.info
fleischerei-poeschmann.mediatack.info
viasona-carsonal.de
hr-pro2.mediatack.info
ardenne-jobs.de
swimb.mediatack.info
vonardenne.biz
flexjuma.kjr-mittelsachsen.mediatack.info
ardenne-jobs.de
viasona-carsonal.de
dev.hr-suite.mediatack.info
ihkwahl.kiel.mediatack.info
swimb.mediatack.info
hr-pro2.mediatack.info
vonardenne.biz
emmerling.mediatack.info
intranet.lbv-hamm.de
vonardenne.biz
sternwarte-dresden.mediatack.info
hyvest.de
intranet.lbv-hamm.de
bau-outlet.com
swimb.mediatack.info
intranet.lbv-hamm.de
dev.lbv-hamm.mediatack.info
analytics.lbv-hamm.mediatack.info
hyvest.de
vonardenne.biz
va-stage.mediatack.info
swimb.mediatack.info
vonardenne.biz
bloi.mediatack.info
viasona-carsonal.de
va-stage.mediatack.info
hyvest0prod.mediatack.info
va-stage.mediatack.info
dev.bloi.mediatack.info
va-stage.mediatack.info
hyvest.de
swimb.mediatack.info
sternwarte-dresden.mediatack.info
hr-pro2.mediatack.info
va-stage.mediatack.info
vm-hrsuite.mediatack.info
kjr-mittelsachsen.mediatack.info
webmail.hilo.de
hyvest.de
viasona-carsonal.de
www.zukunft-mit-stern.de
sternwarte-dresden.mediatack.info
bau-outlet.com
aestimare.mediatack.info
hr-pro2.mediatack.info
swimb.mediatack.info
zms-eu.mediatack.info
ardenne-jobs.de
dev.bloi.mediatack.info
tp18.mediatack.info
vonardenne.biz
dev.bloi.mediatack.info
webmail.hilo.de
aestimare.mediatack.info
hilo-mail.mediatack.info
sternwarte-dresden.mediatack.info
va-stage.mediatack.info
webmail.hilo.de
ps-initiative.hr-pro2.mediatack.info
tp18.mediatack.info
consulting-haus.mediatack.info
swimb.mediatack.info
hyvest0prod.mediatack.info
hr-pro2.mediatack.info
www.zukunft-mit-stern.de
www.zukunft-mit-stern.de
hyvest.de
swimb.mediatack.info
hr-pro2.mediatack.info
vonardenne.biz
med-ardenne.mediatack.info
hyvest0prod.mediatack.info
tp18.mediatack.info

Certificate

The complete raw certificate details for dev.bloi.mediatack.info in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ec+hurmO1vUZzIqt0Bs
KvXE6QRPnJZoRAlYh6n1AojQkPQa1HTbgnbY/e2rLilK3bK1l/CsDHd/VV22aTwr
04HROQmiHRXIg0W+x2xmTtM+qxPNUSm03J3GAjNrLDsjhkTn83ML7EN7EzJyaD1Q
Ro09ic5mc0x5CMh0k49LNHNR9gZw0zOQObC01fLTniSg2BbYUB24d71tUatlp9ge
G/4iP93hQdy5VG0trJgggso5z2WRbKLYzr+C1oyLNbyNOu684Yv0iBm5XQlXMEuM
25W2E58IC8S2h+GXRaORSymmX1X035m6jhFHEUQHphEjHR9K0+97YEjfo8B9M/jj
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345384168832832765959448157076766558015616
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-11 10:10:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-11 10:10:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.bloi.mediatack.info'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27807558939705551701702973322549818830093326944686506770909833358573472124309894402836551327912428237875496755562572345825656257549882305112785493279285639258985715926723045345658633909668590583946104193263970263325590069785483434803520235637663303256548150234254346478919031601140894924336797192314879762051189959268122233557867428028397794775006474515381456801068958181453696148780119817729113284470030893568719068901134538726383184721887033266265028808004516132383259939585662066000644248498581520078677414833431553781252780735875974806465492352686995640324220026752556670226532458145047997527633823274149560771431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95f3f1f9dfc488d3ffb61f0ab77588fad9b0bafb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloi-marienberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bloi.mediatack.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bloi-marienberg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d97dcbac00000040300463044022038a49c379116f91b87bdad3015c3c0a51eebdfa1ef720e69d69089e360e9721f02203cb177a036166225c6eae922bb598f6202cf1c7b29739e2dbc4a969cfa79526900750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d97dcbb140000040300463044022008b2a6ef689871a7d6c4894acc1fe7c273a0b3bbe6163524773a927c46c68fa902201cb9ed97ebed79cda8842502530514af2dd93ca705af20441eb034b46a0afb2f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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