stefan-hofer.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:68:96:1d:81:83:62:73:53:db:c8:f5:24:51:57:bf:e6:c9 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stefan-hofer.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:96:1d:81:83:62:73:53:db:c8:f5:24:51:57:bf:e6:c9
Serial Number (int): 296925761357875172144876052087408879986377
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:71:fd:fe:9f:09:77:57:5b:8c:41:91:c4:cf:23:1b:e4:69:e9:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:ac:0b:30:4d:1c:d8:bd:49:0d:66:71:71:c5:ea:3d:aa:20:3b:cd
Fingerprint (sha256): 9e:88:c2:bd:7f:a1:2b:58:f2:3c:76:06:7a:e6:65:bb:45:3c:0c:bc:65:76:80:d7:75:79:35:94:2b:52:3c:97

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stefan-hofer.at

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stefan-hofer.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brixental.de
fieberbrunn.de
langlaufparadies.com
pillerseetal.de
stefan-hofer.at
stefan-hofer.at.futurecms.at
stefan-hofer.at.kunden.ortsinfo.at
wanderurlaub.co.at
www.brixental.de
www.fieberbrunn.de
www.langlaufparadies.com
www.pillerseetal.de
www.stefan-hofer.at
www.stefan-hofer.at.futurecms.at
www.stefan-hofer.at.kunden.ortsinfo.at
www.wanderurlaub.co.at

Other certificates including the domain name stefan-hofer.at

(limited to 100 certificates)
stefan-hofer.at
stefan-hofer.at
stefan-hofer.at
stefan-hofer.at

Certificate

The complete raw certificate details for stefan-hofer.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAm4hOlC09K+mu6Fi61OxB
bdPIGGbKjsT2nTRaKoxghcUuqJ+DCWhRXLo9vSVaSz8zGa8Z7nKLaZ4JG0S45Zs1
QvX3sGUhIpVDyCHYitdiOEuT/Q3RotC2IObYA27XHpsy7G0UGJ1PD24IGainQ4w3
wGoLiLr9tbOzvKnHWSKywq1ik3vYbwJ9iNb2ycmg7K5lhh4PP0NgVVJ7zbqH1cIv
l7XKYxFrB2drDQYIIDHrD5kq/2iNJM/V/UbQVj2WXSItner/y7OfLVvhvMrC6V8t
iVsbXeFhLrQdy6oy9ZjagMo7LpDqU4a35HCbAUSDnxBqa7HRE4egBBobPE+9v8lZ
t92AKaLShLstx3ldn0SiW+c/JXyEyhjQrfvCr8e08sGIZc/xtgMiSJfbohSaOdLB
I8UqlM+0oKXDcnky6XYeo5volyVqxZF++rNFKMbQJGJFanc08Sqf6rwZ+QaB9ed1
aj05A2fYcSvjJ41KowPpROmjFHmtD9jaiEU51xj3ZNImYAT4OVC/pcc1x9P+8ZiS
Gii5XpjnLUrOcqlRmGOW0DSo+9d2LtSV8iYjYrnbynUkCtUQaJCBD1AyRXgGwZzc
qfh7SbhOY1KbezoJwn1gzcP/9nYP47NBc6rOmIMbyFqfhTP6BFyFkWwJesWxeIKo
utN+62B4RE0wiLPVnHF33wsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296925761357875172144876052087408879986377
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 17:55:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-21 17:55:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stefan-hofer.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 634517033019161326514128487383517699941029272110135850565242555542859297182834724837364174559961042366665846082536999286290809134237395844358677155346400399493964136601585311450828558547526184186760157108740336591890569780142730269082070037425506170043451474215583817463729459078006151905893473789462914422572424187727644168148882690317641509830379602882711141394672777515236312015936725910714574601360139826470103007055698619185480825180548317800761071350470736530761097682756983027379423570947291774686245090973321920171197527356592528022565459922822260294866730235401430524840550439796303665623702101678923143805247154207407727762489949463092305286542423965016594223630118400429100029500573811417330648910584480281574108647782734995020560810726192587800461208179129414010625979182691110934689381872485239483974645230622301790420498296371531833321526472863856470469423119174709685464599627424192375270252990088532638430627673961658528230007711725219599710164944647890968448902161583579998547506154743208404872274981762437050451888946096923412885154924897668635877412187914709002054684491221537912312540743324231750307744083210106493311153600144621748825246583681758044683972456617224588157741570763206795561352936636673713564540683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb71fdfe9f0977575b8c4191c4cf231be469e906
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (380 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brixental.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieberbrunn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langlaufparadies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pillerseetal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stefan-hofer.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stefan-hofer.at.futurecms.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stefan-hofer.at.kunden.ortsinfo.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanderurlaub.co.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brixental.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fieberbrunn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.langlaufparadies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pillerseetal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stefan-hofer.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stefan-hofer.at.futurecms.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stefan-hofer.at.kunden.ortsinfo.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wanderurlaub.co.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170691af1d30000040300483046022100dc36f49385e6b6cc9cb6e1a72609977dc03d023b55a7f02dc127180cf2125086022100d95d37d0c6a890bc18bcaea0927e6cd4005d934f5db5953a1cc7cd9355e41352007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170691af3750000040300473045022100d68c5cb8b9d054bb7ac8d23cac35a3f54bd19e7d76fe08f6e42357647e8c92a0022031fe1a3be47eeff58e23319b750c7b0538d689f2ea869f9aca02a5a86e4f6bd8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005d2586bf702ed4df1effd806324d37e4dd14b0fcb22a8fa2483eb22e43f5a183cb244390590ca7087443804e5446116b00872633856d1d4f3041fe8ccbefd9a7b8cd4861fa4129eeb586b871098c3ea71a96611fecbcfca96ffbf2f4615f0b2a753e0529c94b47a72dd5f1937b5661df2d10e98dc0935248919c4c2e24fd371f789506370833465d6a33ad2dbe010884cac24f7e36b414844a81f615edeba6577ed212317ef421b2ad09c28d04482c839fa1dc49fb4da12a38c167055768bb898539d341a67f675d6812b1917b5ff03ebc88bfaab12409821903e8d04f8aad2ad588271a7f386c02f2a7888a03fd155cd5fe5eec452220f852ddb0ea689aad69