gw-ss.machart.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e6:75:cc:5c:4d:71:f1:40:d6:72:58:b3:4f:f6:10:12:0c was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gw-ss.machart.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e6:75:cc:5c:4d:71:f1:40:d6:72:58:b3:4f:f6:10:12:0c
Serial Number (int): 339758382963280078311385493648561067266572
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bc:c2:02:7c:75:12:b9:01:0a:ef:06:d2:6c:32:ae:99:72:7c:05:12
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 75:d5:c1:bd:7d:c5:6f:07:5a:d4:3b:e3:d4:44:41:c1:ae:59:bd:95
Fingerprint (sha256): 95:b7:f2:d5:af:38:d1:44:53:9b:4e:d8:49:af:03:bc:5b:92:e7:f1:6e:92:02:1b:9c:45:de:f4:ec:49:10:51

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gw-ss.machart.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gw-ss.machart.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

data.hermeskreis.at
data.machart.com
defaulthttp.machart.com
gw-ss.machart.com
heizraum-ss.machart.com
nas.machart.com
nettl.machart.com
photo.hermeskreis.at
photo.machart.com
photo.n5c.eu
photo.puchhammer.at
photo.widhalm.eu
ss.ddns.ms
ss5020.machart.com
vz-dss.machart.com
vz-ss.machart.com
www.hermeskreis.at
www.machart.at
www.machart.com
www.n5c.eu
www.puchhammer.at
www.widhalm.eu

Other certificates including the domain name machart.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for gw-ss.machart.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339758382963280078311385493648561067266572
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-30 00:48:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-28 00:48:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gw-ss.machart.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768952137358495716804336430028953953487318415208759718597242278782621028112131844500447673166484988197209752438370095351049830250369004985790488046125484626247005163888662529186174849044395508374814741741794000697061487400383132540313366538217632212436710857631151436684370863934048174177746573692901953007492841730220653350671672844366727488746136681861292573783790540354799698734899429765153456671362058585803797209441962879519025097786967868741273592027354985416219459878270937765931199071515948933183658895469569169778421828825861940379941505699890424597751683461414003535595473899319562601304012051451944481497089658058719868259011945852571017256346746576657321845962915726015772523751967103048571958643726129378034629652806966350217989427204541250774073190908510145496956934592996763822185418731080298305128968408895207190924631277939270183570653003424947759167424274856157802217067607529001407920901521844923000230783074865670563339172435799360602649754644952446293307196990918866492817807626962771023645657192408536893854940165657491481939448858206024001704860264022345389420154857810170284457474297490447149871742216998295619992592076900482658035790690596859710689758756923965298585494143718410088578705375734670093863164303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bcc2027c7512b9010aef06d26c32ae99727c0512
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (413 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.hermeskreis.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defaulthttp.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw-ss.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heizraum-ss.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nas.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nettl.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photo.hermeskreis.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photo.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photo.n5c.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photo.puchhammer.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photo.widhalm.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss.ddns.ms'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss5020.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vz-dss.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vz-ss.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hermeskreis.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.machart.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.machart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.n5c.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puchhammer.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.widhalm.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ce035ac610000040300463044022025c9f63de093ac0168b8d54ebc40336958e027f4978216b144c76eb0b1481e4302202a68b04cfd84a3adba21c226bc6faf9168c3cd3568cda7c358396c82257a2815007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ce035ac840000040300483046022100db27857a5010d01a0c113fdefc7eb1e8260376a8b962b2c97fb0a9f404d8818d022100a064284c21629f777056b5ab993e0ebb2f1efe414fe7f69945cd130dfa259b31
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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