www.casc.at

Issued by R3

About this certificate

This digital certificate with serial number 04:54:4c:e0:2e:3c:3a:5a:3b:f9:21:8b:db:2b:6a:43:cb:57 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.casc.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:54:4c:e0:2e:3c:3a:5a:3b:f9:21:8b:db:2b:6a:43:cb:57
Serial Number (int): 377135047888338373661089927320223460084567
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7c:2a:b5:02:5f:d4:b6:b8:25:c5:83:53:92:8d:25:e6:dd:f6:f2:bf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 38:68:ea:53:5f:cf:8c:85:c4:0e:e3:dc:3a:ec:02:38:90:36:bf:f7
Fingerprint (sha256): b8:60:40:e7:a5:cb:c0:b1:5a:46:9c:34:a8:22:de:fe:06:ab:d1:b8:4c:53:c6:ed:4e:ba:1b:ae:38:24:9b:65

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.casc.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.casc.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

casc.at
www.casc.at

Other certificates including the domain name casc.at

(limited to 100 certificates)
gymbadvoeslau.casc.at
www.casc.at
cpt.web1.casc.at
gefas.casc.at
www.casc.at
100und1.web1.casc.at
gymbadvoeslau.casc.at
100und1.web1.casc.at
100und1.web1.casc.at
casc.at
casc.at
www.casc.at
athletics-meeting.at
uba.web2.casc.at
gymbadvoeslau.casc.at
www.casc.at
www.ensemble-tris.info
uba.web2.casc.at
sportunionfavoriten.web2.casc.at
100und1.web1.casc.at
favoritenwp.web2.casc.at
kirschenhof.web1.casc.at
casc.at
sportunionfavoriten.web2.casc.at
cpt.web1.casc.at
monitoring.casc.at
gymbadvoeslau.casc.at
sportunionfavoriten.web2.casc.at
uba.web2.casc.at
physio16.casc.at
100und1.web1.casc.at
server.casc.at
casc.at
favoritenwp.web2.casc.at
gymbadvoeslau.casc.at
preview.casc.at
casc.at
gymbadvoeslau.casc.at
uba.web2.casc.at
gefas.casc.at
www.casc.at
physio16.casc.at
www.casc.at
sportunionfavoriten.web2.casc.at
sportunionfavoriten.web2.casc.at
www.ensemble-tris.info
physio16.casc.at
favoritenwp.web2.casc.at
100und1.web1.casc.at
sportunionfavoriten.web2.casc.at
preview.casc.at
gymbadvoeslau.casc.at
sportunionfavoriten.web2.casc.at
www.ensemble-tris.info
www.schneekugel.webhost3.casc.at
casc.at
staringer.webhost01.casc.at
gymbadvoeslau.casc.at
100und1.web1.casc.at
sportunionfavoriten.web2.casc.at
uba.web2.casc.at
casc.at
www.vipur.at
cpt.web1.casc.at
www.casc.at
gymbadvoeslau.casc.at
favoritenwp.web2.casc.at
casc.at
www.casc.at
susen.webhost01.casc.at
www.casc.at
100und1.web1.casc.at
bg9.web1.casc.at
cpt.web1.casc.at
favoritenwp.web2.casc.at
sportunionfavoriten.web2.casc.at
uba.web2.casc.at
www.vipur.at
100und1.web1.casc.at
favoritenwp.web2.casc.at
cpt.web1.casc.at
100und1.web1.casc.at
favoritenwp.web2.casc.at
lbmanu.webhost01.casc.at
www.tu.webhost2.casc.at
100und1.web1.casc.at
uba.web2.casc.at
www.leppla.webhost3.casc.at
server.casc.at
www.casc.at
gymbadvoeslau.casc.at
casc.at
www.casc.at
sportunionfavoriten.web2.casc.at
www.casc.at
server.casc.at
server.casc.at
100und1.web1.casc.at
favoritenwp.web2.casc.at
gymbadvoeslau.casc.at

Certificate

The complete raw certificate details for www.casc.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377135047888338373661089927320223460084567
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-27 22:05:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 22:05:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.casc.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 653726009367687274173436613601087225641259258771830433350194400998687396540304615103870985665233171482774044585389935737640678847151417413199296179490251133582502138179150451770733160359757898514445853561859290465827145474433180000312362682074444643509607049338308368257329923718413290190153268177316957499505651297010431159337331849284707968633292634364237409410422425139707278221232093019356808939212678852647942115939331691395038129282244534150740383026261852846913829870623287691693312158210457905795508459206443999192644942057831971121560580499686603949253460766785329451199623281724266853573037790196071904654571948595202162665465026394047515250868428291751369154716367010038212301566546513136900670454575322491858373759879994104685749001040686085151885658625086634406473328089958385753105308957161825615728954302324128651412418542596919720431880141957505347309250126644017029844873969843832842875583017388971716887780775169706788696114753767411853105193604257473337395164359373565381358295339008180215915589601683305864784569750346930644188990876512713158137310112260486093416629693028566740417759419716011842030979447265462536832932478280683591837804349000853808961627962632914462981489585115414537144068750014421086644205289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c2ab5025fd4b6b825c58353928d25e6ddf6f2bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casc.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casc.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d4d2c1e61000004030047304502210083cca6767a82e48a5025d59e460e0931f741ea24b0c24fb6d4391a7504490847022024ea9a29dd53133b462cd5ba9cf956a07ec23f5b6b6c3dfa97a4702e40df1a220077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d4d2c1e610000040300483046022100912b365e366ffb96dba78a3415b3fa119e6db336e73a1e1107edd36fa45883f1022100b65a9a7ac9f40384521ae67671cc562452bf1d044dd5d13192943dfa6b167dea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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