news.grantthornton.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a5:db:8e:58:12:aa:67:54:aa:17:a7:12:ba:72:d1:61:d5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=news.grantthornton.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a5:db:8e:58:12:aa:67:54:aa:17:a7:12:ba:72:d1:61:d5
Serial Number (int): 317775288360797284350466933568206802084309
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:36:6d:b6:ad:31:33:9d:c5:f1:4c:07:a3:9e:17:6c:0d:dd:46:9f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d7:e7:0a:72:63:aa:ba:07:d6:0e:94:78:a7:bc:45:4c:7f:fe:8e:69
Fingerprint (sha256): a3:21:47:f4:63:b6:51:08:ee:d4:f3:05:42:04:42:c5:9a:46:41:ec:9b:48:e9:10:8a:eb:c6:b5:b4:6c:60:c6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate news.grantthornton.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for news.grantthornton.at

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

news.grantthornton.at

Other certificates including the domain name grantthornton.at

(limited to 100 certificates)
www.passle.net
www.passle.net
grantthornton.global
www.grantthornton.global
grantthornton.at
www.passle.net
www.passle.net
www.grantthornton.global
www.passle.net
grantthornton.global
www.passle.net
*.grantthornton.at
grantthornton.global
www.passle.net
mail.grantthornton.at
www.passle.net
www.passle.net
www.passle.net
www.passle.net
grantthornton.global
grantthornton.global
sni.cloudflaressl.com
grantthornton.global
grantthornton.global
webmail.grantthornton.at
sni.cloudflaressl.com
*.grantthornton.at
*.grantthornton.at
webmail.grantthornton.at
www.passle.net
www.passle.net
sni.cloudflaressl.com
www.passle.net
sni.cloudflaressl.com
sni.cloudflaressl.com
www.passle.net
webmail.grantthornton.at
www.passle.net
benhammersley.co
www.passle.net
sni.cloudflaressl.com
grantthornton.global
www.passle.net
mail.grantthornton.at
www.passle.net
grantthornton.global
news.grantthornton.at
www.passle.net
grantthornton.global
webmail.grantthornton.at
*.grantthornton.at
news.grantthornton.at
www.passle.net
grantthornton.at
www.passle.net
mail.grantthornton.at
mail.grantthornton.at
sni.cloudflaressl.com
www.passle.net
www.passle.net
www.passle.net
*.grantthornton.at
www.passle.net
www.grantthornton.global

Certificate

The complete raw certificate details for news.grantthornton.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgISA6XbjlgSqmdUqhenErpy0WHVMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDYwOTUwMjRaFw0y
MDA1MDYwOTUwMjRaMCAxHjAcBgNVBAMTFW5ld3MuZ3JhbnR0aG9ybnRvbi5hdDCC
AaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAIfIxGUaapfFdfZxKAzllgl/
z+XxPUKmf7M3fKCL13Qh5EMl5LdToglgb4pMRrzH/s0W9Axc0GnCwWkt+jJHFDIs
oq1H0VRC7aSiYKxLwKW9u1AZGHE3haQ/HqnRJUjd9zMqe0vcnAwwf7zrzyau7m+Z
i4oFMN/qUmc/QBGd9dlzEIXaGVfeJMEvT2B2/M5pG5qwhVs99a5dsUZzGVVoSzi5
1ICqvBV4y5pW4ok0XdRXrM92qHzPz245vCm9uOJAzF+ar9Dz+3ij7ty7QLMAKFPK
HNoI0aDoHnQNZRBii6UMx3Zhs39G8qzLlE7DEvD39oWuZcb+fKhSTUux3I7v0kmy
nUGnUky1v0zeDwWBGY065DVKpqJnsNaKDNKWx6/+HoP3LThVdX7s6pW8I8CtWvGD
spf/T6OUU1tathavtuI+T0hOYHltAYt0NQApVuZO24T/CY38/S7vcvUdSJ1sViQQ
EImnM/zS/G5hcxqtNvgDENP9e0wRAjnW75hMyccw1wIDAQABo4ICbDCCAmgwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBT2Nm22rTEzncXxTAejnhdsDd1GnzAfBgNVHSME
GDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYB
BQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYB
BQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCAGA1Ud
EQQZMBeCFW5ld3MuZ3JhbnR0aG9ybnRvbi5hdDBMBgNVHSAERTBDMAgGBmeBDAEC
ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl
bmNyeXB0Lm9yZzCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AAe3XBvlfWj/8bDG
HSMVx7rmV3xXlLdq7rxhOhpp06IcAAABcBofTx0AAAQDAEgwRgIhALrMqeeaPO45
g2twSqTxkFKlshBXHNOXnnepjhbqVQiKAiEAxUPgy8BjomQA2k/rSSD0y/BEvbZX
EVDLeJJpeDqBhNUAdwBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAA
AXAaH1DFAAAEAwBIMEYCIQDYGIMFfTxmNQDtpJEk8kH/4Y2kVhytCtboVzMY1MJH
uQIhAKRn2knR2ogQ8vohzXPjaj0lcoxf1q102FZnPo8ncxMaMA0GCSqGSIb3DQEB
CwUAA4IBAQAKi6WZXeW0vYC9TE1OU+aaQByhTJe2XMnrvUdV8OMGlZ6g/t+CKJrH
tQL6dxRbh2huy847J/AA+nxCZznbhZ2I8uwKXBbi2OGYOeqKi3hNm7rHz007ndxO
nEYxhkPTEiygUFWDJMMGqBTbcIB0Xy2PZ7dangBBlpflXH7YIsgUyiGcwXjRf3E8
36/+71ZX1wbNHvPKvWD9KMNmGyku/3JcWotaSzwaC/LY530LsdU95KD0zhlRb2RJ
EpjhI2wKrCLtE/ag5vVWfXtSeCuTqMxwbbhP00pk4WuF5mCZ+3eJUpzTa9pmsCIJ
o+uz1YHH+PKVy5aDYUdFlSJBlVZDoEGW
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317775288360797284350466933568206802084309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 09:50:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-06 09:50:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'news.grantthornton.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3081456929644778321781777524910659418092673662770689608769248158253688836920304785819078723472370939682608828424567201573103853015571320042936489056318021687756132376497087558739261375355882053349174947544051104073366119868466180844023370962572017219391729355300328364396533377122031189678578383766017273740979979742340680180545775325207845980625397639874469233752020792433395131419163740354038740246416931368889898811199005985157155032287998454069211930571281240041965869813888017271822600581396310352403022409937380347013084251020491880294097413814136035103967783225257958872809993203210068197794817822400199597638282947023485203969093417047521991833412536653575014031025090863735325619472226445819472811557157746022607476053951307064421313002568980515763218983180866995029137585241360025527008315694136098226571599534303003629120712175994325271969904567791918382621131399909347033467218735298908627921171184304405449486551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6366db6ad31339dc5f14c07a39e176c0ddd469f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.grantthornton.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001701a1f4f1d0000040300483046022100bacca9e79a3cee39836b704aa4f19052a5b210571cd3979e77a98e16ea55088a022100c543e0cbc063a26400da4feb4920f4cbf044bdb6571150cb789269783a8184d50077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001701a1f50c50000040300483046022100d81883057d3c663500eda49124f241ffe18da4561cad0ad6e8573318d4c247b9022100a467da49d1da8810f2fa21cd73e36a3d25728c5fd6ad74d856673e8f2773131a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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