qa.paier.at
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:cb:09:b2:b8:69:3a:0f:80:12:61:9e:86:2e:7a:85:af:b5 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=qa.paier.at
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:cb:09:b2:b8:69:3a:0f:80:12:61:9e:86:2e:7a:85:af:b5Serial Number (int): 330427069301334424470274787603019607682997
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1a:69:55:44:b5:79:db:59:d8:c5:c1:35:7d:8a:85:81:b7:9e:0f:99
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 4c:cd:d5:75:95:a7:4e:b1:92:52:b4:20:30:fc:06:14:3c:1c:e8:4d
Fingerprint (sha256): b1:c8:74:62:59:3e:17:e7:7a:57:2b:59:1e:77:46:f2:d1:b4:9e:1e:8a:d9:61:aa:57:d0:fc:b7:cb:f0:b3:12
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate qa.paier.at
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for qa.paier.at
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
qa.paier.at
Other certificates including the domain name paier.at
(limited to 100 certificates)
www.paier.at
www.paier.at
qa.paier.at
www.paier.at
paier.at
qa.paier.at
www.paier.at
www.paier.at
paier.at
qa.paier.at
qa.paier.at
www.paier.at
paier.at
www.paier.at
qa.paier.at
www.paier.at
qa.paier.at
www.paier.at
qa.paier.at
www.paier.at
qa.paier.at
qa.paier.at
paier.at
www.paier.at
www.paier.at
paier.at
qa.paier.at
www.paier.at
www.paier.at
qa.paier.at
qa.paier.at
qa.paier.at
qa.paier.at
www.paier.at
paier.at
paier.at
paier.at
www.paier.at
www.paier.at
www.paier.at
www.paier.at
www.paier.at
www.paier.at
www.paier.at
qa.paier.at
www.paier.at
paier.at
qa.paier.at
www.paier.at
www.paier.at
paier.at
qa.paier.at
qa.paier.at
www.paier.at
paier.at
www.paier.at
qa.paier.at
www.paier.at
qa.paier.at
www.paier.at
qa.paier.at
www.paier.at
qa.paier.at
qa.paier.at
paier.at
www.paier.at
www.paier.at
paier.at
qa.paier.at
www.paier.at
www.paier.at
qa.paier.at
qa.paier.at
qa.paier.at
qa.paier.at
www.paier.at
paier.at
paier.at
paier.at
www.paier.at
www.paier.at
www.paier.at
www.paier.at
www.paier.at
www.paier.at
Certificate
The complete raw certificate details for qa.paier.at in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgISA8sJsrhpOg+AEmGehi56ha+1MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA5MjcwNjUxMDBaFw0x NjEyMjYwNjUxMDBaMBYxFDASBgNVBAMTC3FhLnBhaWVyLmF0MIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEA0EwruSYpggOXa5LdEgsLeNrTrO2mrlX5DHfp Kz5kwug1KnvZAHA1d+H555eFC356iFbOnLia2xagjNANkj9+OvKwLemzQnKcElSy AYxOKGTN90pg7oi8Qup4yp6SAZ1h7km3CBjT1msYNj3fiqbLmS3BLu5xP22FtEOd 2DC/Z0kTdFeKisK9zVXlhCVFhAFrUE/FUg5R/HJxUGMS9VHuZqL8rE4qkBglSPys mQegA9Lndvd2e+wUh/Mo2gbreGhTemU6D2LX5gfIQnrxHW9sUbd5P7cuklaktGRW FC36XjGk3nhQtURcU+rRi6yWPbfCw0SQEXWunFWmt60+iqRVTQmowfNI9o6Vt+Eq sEXqao5WcASRf541nHPlvzAqG4TnrAphE22BondltpM3TcDM7PY0aLUdnC/hE/hH ekfl68hBN5Npa5fFyd6jG90x9oRMmumgev5ctk8PbwPeRO4pmp8Q/3+tpQnuMP8a AOtChX2iOudrPitbr5xiBSn7lYrHmGbjLNkF07WI7XTGs4C7Ryu8pO6K+r6Lgjxh qIPnnq0UQzlVei0iZ7RChEsV/ZvBx1kfxg4XBW7lj2c2KqhRrewfW4zdkWJfD4PW 458Zs3ho0HWmuPBb0hj0r+NnfimFrXTUN4Mu8aTFSU6rIeIzLgBueLjlJCXJIz7S sGC6B6UCAwEAAaOCAgwwggIIMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUGmlVRLV5 21nYxcE1fYqFgbeeD5kwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw cAYIKwYBBQUHAQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFgYDVR0RBA8wDYILcWEucGFpZXIuYXQwgf4GA1Ud IASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtU aGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlp bmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRp ZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9y ZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAR3f94PY6t2o3tfYP/pIpee9/ bjpajyMdS/ADZINnLMNzRnJBs5DmhA5rG8l95jh9AkOPpcFSXikN4urAQrAeKKCl 7OHrSN2jWHRPnRGDWJCP0q0nYXnon5804ZXYAu181Uzre5lbkoMb+XIwg47tCq8o hXGFls+A760pr5v9fOeWSxkrsMAyxeR5KhOPW8ThLDhdUOrNDiDwUUT0SfLSBEfq spvAgfCH1yPCcgiTt10yDo0HrTCMHrVAWMKUEC8g/jZpWoGEFgMlC8OQCIWQ0IMP Mtn5rAaBFEcnO7IL/UgVx/4kK8nmRZcy3cd51Fzolv4eKAB32URH0Rj72Y/3ZQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0EwruSYpggOXa5LdEgsL eNrTrO2mrlX5DHfpKz5kwug1KnvZAHA1d+H555eFC356iFbOnLia2xagjNANkj9+ OvKwLemzQnKcElSyAYxOKGTN90pg7oi8Qup4yp6SAZ1h7km3CBjT1msYNj3fiqbL mS3BLu5xP22FtEOd2DC/Z0kTdFeKisK9zVXlhCVFhAFrUE/FUg5R/HJxUGMS9VHu ZqL8rE4qkBglSPysmQegA9Lndvd2e+wUh/Mo2gbreGhTemU6D2LX5gfIQnrxHW9s Ubd5P7cuklaktGRWFC36XjGk3nhQtURcU+rRi6yWPbfCw0SQEXWunFWmt60+iqRV TQmowfNI9o6Vt+EqsEXqao5WcASRf541nHPlvzAqG4TnrAphE22BondltpM3TcDM 7PY0aLUdnC/hE/hHekfl68hBN5Npa5fFyd6jG90x9oRMmumgev5ctk8PbwPeRO4p mp8Q/3+tpQnuMP8aAOtChX2iOudrPitbr5xiBSn7lYrHmGbjLNkF07WI7XTGs4C7 Ryu8pO6K+r6LgjxhqIPnnq0UQzlVei0iZ7RChEsV/ZvBx1kfxg4XBW7lj2c2KqhR rewfW4zdkWJfD4PW458Zs3ho0HWmuPBb0hj0r+NnfimFrXTUN4Mu8aTFSU6rIeIz LgBueLjlJCXJIz7SsGC6B6UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 330427069301334424470274787603019607682997 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-27 06:51:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-26 06:51:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa.paier.at' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849779832271206088689174959680164870786905189727283061397253143752404932327982570570981576405975366177058350799448091290147343434201223086849483370963713798326023118662490104442350427047051653990343744520456206694698020383080659328255980571814858437594005630866365798280255779756156237496756174677063419043331400821878331395898807586874004517690577383797314263776432875336044011179898004536768065515239931301398304989139428118958883222787947746518088112011506977285297840828804111806432325817573322385444636706952578071132304835538093945036051304281310246925668319841310235520787667152375766061024886629489489804304484358170078563512158068413309559015992962980469072114290311133382700785659855819140589535345051015315696934597215419444131788449684487749456093274563547465408512976748614164886016233327357210397652598649877680484844702693828212318026807800646110130398830668007523560122437666743121208939328408650799522393281017859612011008989074274806289797207012658342877947663431273929320766939657244251577809428842659240190108945780105496065470386857866747810954868265560335977238401461340454960376736450786664611594457992936866482028323683250964685804123780799171932502164324032833669797871739715735210566981195345849276882880421 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1a695544b579db59d8c5c1357d8a8581b79e0f99 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.paier.at' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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