acriba.at

Issued by R3

About this certificate

This digital certificate with serial number 04:ce:3e:81:b4:0b:8f:1e:f4:aa:9b:4d:30:00:da:02:3c:55 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=acriba.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:ce:3e:81:b4:0b:8f:1e:f4:aa:9b:4d:30:00:da:02:3c:55
Serial Number (int): 418630396906537258061376067386729207839829
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ea:6d:ff:6d:21:c5:c4:8e:e8:f2:df:0b:4f:d3:2c:57:3b:3d:af:a2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 61:19:cb:88:28:71:f1:42:69:22:fd:5f:d1:67:7e:7a:54:9a:e0:d0
Fingerprint (sha256): b2:19:eb:5c:1a:9b:dd:09:3e:d3:10:24:d3:fc:8f:40:43:9f:15:a4:38:1b:8d:96:1f:3e:70:b0:0a:e7:31:f8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate acriba.at

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acriba.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acriba.at
acriba.biz
acriba.eu
acriba.info
acriba.net
acriba.org
acriba.tel
www.acriba.at
www.acriba.biz
www.acriba.eu
www.acriba.info
www.acriba.net
www.acriba.org
www.acriba.tel

Other certificates including the domain name acriba.at

(limited to 100 certificates)
infina4.acriba.at
nash.acriba.at
donau-uni2.acriba.at
acriba.at
donau-uni2.acriba.at
nash.acriba.at
donau-uni2.acriba.at
acriba.at
turing.acriba.at
donau-uni1.acriba.at
nash.acriba.at
donau-uni2.acriba.at
donau-uni1.acriba.at
www.acriba.at
donau-uni2.acriba.at
donau-uni1.acriba.at
donau-uni2.acriba.at
donau-uni1.acriba.at
donau-uni2.acriba.at
ssl.acriba.at
nash.acriba.at
donau-uni1.acriba.at
exchange.acriba.at
donau-uni2.acriba.at
acriba.at
turing.acriba.at
nash.acriba.at
turing.acriba.at
donau-uni1.acriba.at
acriba.at
turing.acriba.at
nash.acriba.at
donau-uni2.acriba.at
turing.acriba.at
donau-uni2.acriba.at
ssl.acriba.at
donau-uni2.acriba.at
ssl.acriba.at
exchange.acriba.at
nash.acriba.at
acriba.at
turing.acriba.at
donau-uni1.acriba.at
acriba.at
turing.acriba.at
acriba.at
nash.acriba.at
turing.acriba.at
nash.acriba.at
acriba.at
turing.acriba.at
donau-uni2.acriba.at
donau-uni1.acriba.at
acriba.at
donau-uni2.acriba.at
donau-uni2.acriba.at
donau-uni1.acriba.at
donau-uni1.acriba.at
acriba.at
nash.acriba.at
turing.acriba.at
donau-uni1.acriba.at
acriba.at
nash.acriba.at
donau-uni2.acriba.at
donau-uni1.acriba.at
donau-uni1.acriba.at
donau-uni1.acriba.at
nash.acriba.at
donau-uni2.acriba.at
exchange.acriba.at
donau-uni1.acriba.at
nash.acriba.at
acriba.at
donau-uni2.acriba.at
turing.acriba.at
donau-uni1.acriba.at
acriba.at
donau-uni2.acriba.at
donau-uni1.acriba.at
turing.acriba.at
donau-uni2.acriba.at
donau-uni1.acriba.at
turing.acriba.at
nash.acriba.at
acriba.at
donau-uni1.acriba.at
acriba.at
acriba.at
acriba.at
donau-uni1.acriba.at
donau-uni2.acriba.at
nash.acriba.at
donau-uni2.acriba.at
donau-uni1.acriba.at
turing.acriba.at
donau-uni1.acriba.at
donau-uni1.acriba.at
ssl.acriba.at
acriba.at

Certificate

The complete raw certificate details for acriba.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMHfSeylXjARUPm0MK6k
oMduUAmR1fUcOz4IVVdxtkameJn1uw2DbmIx8l3JkMFbotyDRoxNrFyFS3ecl1ju
tt+pz95X4/urbCEbryKPvlG91LTOirMmln3XyBz27yeJaruWV/OYxrLc/Bx2Ckpr
kO/AUDKV1VBTmS8GrbDeYEwEk2y7vnlQhLRsmFdqGG5YSrN/5SK52VhQxfMHkJU5
yFr5OwUETJaQLhp9dKFPaP4CCJfiBaID/bGy7pJXnxnHgjgAsw8E9idRnsrBjWKY
UNcCFdznL2ITKaxo5jyG8zgd3Y0li1dkNG8Q8kkH4f0QeeR6tgWA1Jr79nt7bEaw
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418630396906537258061376067386729207839829
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-11 14:58:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-09 14:58:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acriba.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18273917870789472612671418806325712072757276977308941430303689961789025468884001588931033883582848284881524175932693773345919717597981623155546164370494716820874599596304310001685778035049948541162740931548171832425652284686149037899269814302029337600654326456581455164573056178873284543701198122760833295498405909738912087493566050930114757617613149612325093548668238842826787265769417991972808064328098859015309658862964589302447829013248579369079607482957966068611675363624184768194555799900310473219721462686475221389043407476100411608071530049424772388704081559382538869082337965921924631204136562263092061712401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea6dff6d21c5c48ee8f2df0b4fd32c573b3dafa2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (197 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acriba.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acriba.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acriba.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acriba.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acriba.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acriba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acriba.tel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acriba.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acriba.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acriba.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acriba.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acriba.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acriba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acriba.tel'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f6860cf620000040300483046022100d484ff3967d451ea98bc66e2409b23091df8eb6576f48122247b6690e95e798b022100d430462ce3630ca87b4e5c3de18614ec8d8f9291e145ebd4bcbba7826b9a624900750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f6860cf72000004030046304402204da1ef58ce09ef4918a60a7b672359953151453cc5d06be812804970274a066b02205946ad5a56d708f371b85857d7d4de12508fe83fbd8cd489f4f95bac5d774c6b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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