www.watek.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:29:12:f0:70:bc:73:ca:a0:bc:3f:97:18:87:70:db:b8:75 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.watek.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:29:12:f0:70:bc:73:ca:a0:bc:3f:97:18:87:70:db:b8:75
Serial Number (int): 275313609380769999686078180349296085022837
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 56:e9:ad:01:53:a2:cf:4b:a1:dd:14:ef:ad:22:e4:6c:4b:2f:a0:3f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f8:73:25:05:ae:c8:04:25:7c:27:5a:03:9a:b6:bf:bc:fe:1f:02:c2
Fingerprint (sha256): a6:8e:c6:9b:65:db:25:41:bb:81:67:7c:25:ff:49:be:28:6b:11:19:03:02:4b:15:cd:72:75:ac:c7:44:08:25

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.watek.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.watek.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

watek.at
www.watek.at

Other certificates including the domain name watek.at

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.watek.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275313609380769999686078180349296085022837
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-02 06:11:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-31 06:11:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.watek.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 712935737249055989155890254195662102556177719902233666342278946336912783369930155305058451921064926915931751816733158014296376978705762020731956655311165970073133153048947089763847675540914478510439418412238051386286177316619404667709406981270259110283340457772012533432061522095765404998028764663263475150681184213745511389071392633129511855395257407789267564217887882434984526500717189003114552577409616938371350461711628594029263263513491052823277366256683688471563210182566028446109158061867788433817775790297669355413453666195621054985891882895356393924721181537673639348581205466493725108389452120060368846937774881048711815585951195308891128953250723022022412919449072991024117020212899038280316262429625660346919462944938461372820689363902620962589779819572050480629563892573331021881826059549847187704629176166444171816967657228638262984771103527574824895011180855391249447487735896769632343158815810932813524475257552746296624391348952898542164767217610498845918271083942108214937245595171403590930327555474527739982316708956229441869348194145769046992081686074028625170252031329983653493962004387491912836096051641732954847397746127062094864989729711694259887974925642085795360331456253019076625052095329904241375735772687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56e9ad0153a2cf4ba1dd14efad22e46c4b2fa03f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watek.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watek.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001693d3e3e270000040300473045022100db3198f0acd95ed80b5340179e09302f6dd25a040c2e58f521f8a46e56dcbde102202ac2a212d5401afd9eea30a97d6c75ea1088ce579797c040fa0e6747e581ec3400760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001693d3e3c320000040300473045022004cd137ce646ca194bd3eba6b8e246b84fb2f1b482cfd262ebc76f75e097f6a9022100b6f1b8cc8acdade12c362e1dbe6cd6da625bd5a8660b3bd8b62ce31eb29f529b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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