kjr-mittelsachsen.mediatack.info

Issued by R3

About this certificate

This digital certificate with serial number 03:41:a5:f3:13:d9:e5:b9:33:89:df:05:87:e1:20:42:4d:4e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kjr-mittelsachsen.mediatack.info

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:41:a5:f3:13:d9:e5:b9:33:89:df:05:87:e1:20:42:4d:4e
Serial Number (int): 283675796395212264844020690070845719203150
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:e0:e2:20:62:81:0c:a9:18:bd:f1:fb:9e:5d:b4:33:15:7d:6a:f3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 78:6f:d5:43:8a:c9:53:1f:0b:b1:8b:4d:dd:b5:34:67:d0:3e:05:7b
Fingerprint (sha256): 93:ae:fe:f1:c7:18:96:e3:2e:f2:56:86:aa:32:0b:2f:e6:92:44:0c:2d:b7:e8:7c:ef:99:54:00:4b:58:35:9a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kjr-mittelsachsen.mediatack.info

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kjr-mittelsachsen.mediatack.info

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kjr-mittelsachsen.mediatack.info

Other certificates including the domain name mediatack.info

(limited to 100 certificates)
va-stage.mediatack.info
vonardenne.biz
hr-pro2.mediatack.info
betonzaun-online.mediatack.info
vonardenne.biz
hyvest.de
sternwarte-dresden.mediatack.info
www.zukunft-mit-stern.de
von-ardenne.de
swimb.mediatack.info
dev.zukunftmitstern.mediatack.info
tp18.mediatack.info
vonardenne.mediatack.info
swimb.mediatack.info
bau-outlet.com
sternwarte-dresden.mediatack.info
ihkwahl.kiel.mediatack.info
www.zukunft-mit-stern.de
va-stage.mediatack.info
tp18.mediatack.info
fleischerei-poeschmann.mediatack.info
viasona-carsonal.de
hr-pro2.mediatack.info
ardenne-jobs.de
swimb.mediatack.info
vonardenne.biz
flexjuma.kjr-mittelsachsen.mediatack.info
ardenne-jobs.de
viasona-carsonal.de
dev.hr-suite.mediatack.info
ihkwahl.kiel.mediatack.info
swimb.mediatack.info
hr-pro2.mediatack.info
vonardenne.biz
emmerling.mediatack.info
intranet.lbv-hamm.de
vonardenne.biz
sternwarte-dresden.mediatack.info
hyvest.de
intranet.lbv-hamm.de
bau-outlet.com
swimb.mediatack.info
intranet.lbv-hamm.de
dev.lbv-hamm.mediatack.info
analytics.lbv-hamm.mediatack.info
hyvest.de
vonardenne.biz
va-stage.mediatack.info
swimb.mediatack.info
vonardenne.biz
bloi.mediatack.info
viasona-carsonal.de
va-stage.mediatack.info
hyvest0prod.mediatack.info
va-stage.mediatack.info
dev.bloi.mediatack.info
va-stage.mediatack.info
hyvest.de
swimb.mediatack.info
sternwarte-dresden.mediatack.info
hr-pro2.mediatack.info
va-stage.mediatack.info
vm-hrsuite.mediatack.info
kjr-mittelsachsen.mediatack.info
webmail.hilo.de
hyvest.de
viasona-carsonal.de
www.zukunft-mit-stern.de
sternwarte-dresden.mediatack.info
bau-outlet.com
aestimare.mediatack.info
hr-pro2.mediatack.info
swimb.mediatack.info
zms-eu.mediatack.info
ardenne-jobs.de
dev.bloi.mediatack.info
tp18.mediatack.info
vonardenne.biz
dev.bloi.mediatack.info
webmail.hilo.de
aestimare.mediatack.info
hilo-mail.mediatack.info
sternwarte-dresden.mediatack.info
va-stage.mediatack.info
webmail.hilo.de
ps-initiative.hr-pro2.mediatack.info
tp18.mediatack.info
consulting-haus.mediatack.info
swimb.mediatack.info
hyvest0prod.mediatack.info
hr-pro2.mediatack.info
www.zukunft-mit-stern.de
www.zukunft-mit-stern.de
hyvest.de
swimb.mediatack.info
hr-pro2.mediatack.info
vonardenne.biz
med-ardenne.mediatack.info
hyvest0prod.mediatack.info
tp18.mediatack.info

Certificate

The complete raw certificate details for kjr-mittelsachsen.mediatack.info in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPcA2w7dB0vqVojvm/Re
BsqabPgwKZ7MCqPKocOX1l1s72BUm9+p6oHXjq5H60LVF2xFKhPowyVqs1oOdSTL
oawhlJP+hRdFykuegbA6KKZ9JnfoCgM91tKQDHpEb1xZXv5X5Dlj6TRZJQMMmK3z
Wbanr/IWk5tk08BW3dSGTB5dJDUTmFh51X6sAT3DE9rRjDyY5VRG5+w19HPtrT1N
MWevb9bOpn2JQ6M7Gw1Md/kEona2WqrrgQMVwRNVhtzjuBfPHByNSIXCaN5F2IEV
oqzIerW03dJ4kdKbLGlNNoHvgwjSQFeEIp0FhjqmiOC1kLUTQenMhlIrDtEqawA4
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283675796395212264844020690070845719203150
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-04 22:53:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 22:53:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kjr-mittelsachsen.mediatack.info'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23854603221454245688568927039795011726869986779620292940904266883833038333867475992552084962264766714290038825214250274871604690935922060843837175860756493304560172832808812813793502071899643976631747642346084601690788402766708755896544018209527688439017938575139551761855808834284147167294705824343787544953445145863638995148734367559554318006181851876430200036625066243642440042288787561011240768606696531936547610226419295271147844482584990455672880085223638910534071944320120254037646559836896101567583036844569579516318170975179751776562567624328541713764529234108522519004819870039854450631168858281861015681181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ee0e22062810ca918bdf1fb9e5db433157d6af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjr-mittelsachsen.mediatack.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b9cc1b43a0000040300483046022100fe80e313fdc450eaa70511ad2acaa412433d5598202aeafcc89895ccfe40d1fa022100b7276a30d139a2cf591bd9a969b8bbb4f29bad46438e1a685f4168a58118f5b5007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b9cc1b408000004030046304402206570589bcf13260f8ca5437c52498c4642288b9e0f58f1ca0ddf73f92c7cd406022076fc58652c8a37cf98390227623e28bad1278b9a75998e259caf1e3bbeec248e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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