young.or.at

Issued by R3

About this certificate

This digital certificate with serial number 03:85:12:e9:fb:cc:ec:3f:60:c8:ef:06:40:20:32:12:8d:67 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=young.or.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:85:12:e9:fb:cc:ec:3f:60:c8:ef:06:40:20:32:12:8d:67
Serial Number (int): 306619553611978193432227666561012805569895
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b7:79:7a:d3:51:8a:49:a4:f0:83:03:07:c7:06:ea:a4:64:6c:17:fc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7c:4a:85:f5:6f:e9:cc:09:a9:aa:5e:7d:63:a6:6f:2a:2d:7e:66:ec
Fingerprint (sha256): b8:80:41:23:81:db:73:78:74:5f:a0:a0:85:4e:09:2e:55:74:cd:06:22:74:a5:0d:19:73:43:11:43:17:61:b4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate young.or.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for young.or.at

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

young.or.at

Other certificates including the domain name young.or.at

(limited to 100 certificates)

Certificate

The complete raw certificate details for young.or.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306619553611978193432227666561012805569895
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 06:01:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-08 06:01:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'young.or.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3341229623759818765979219416882531727671353178866432656528716827395164968275585864915097457812622767199455402394701026918346593916440692328226439857934936548885923912070245495799158168097453198484271547718659222882755172168799220918249452793432363310994761805580989814421881924684218221239818733943372935665377796631268378044543092581479649534659622576358803171335331003828755970972771542392255072545490717355076807158094879921581915148836631494576419588143234077963984909605208832044012941177594923298150967341422979854416456433314873349075506837500042051551742385475179412103737256207788769179858230454287934909757038026747163993021795976623744402004881608060935856259980069220540767781229343043729229772372368187657866183971470725918428763486969289580485658704340980593877390636115880942255657876225936073604550916298652894233132776021443352465574598722329877498733190332201447209404227958198796714213767847037328924539423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7797ad3518a49a4f0830307c706eaa4646c17fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'young.or.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f614e465b0000040300473045022100b4e691672840ef3e1e1f4b8919895dcc675cf2cd9ee5118fa43d6f781c806b89022021158643cb46fb43d2392770a0d537d5771d7c9146539295bf191664ca1c0bc700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f614e46af00000403004730450220479ed4f05c504d8e6ea56ed1e6f54b03750f5b653a8520a847ed9900479e55a302210089722cc1b050ca67b04a30936d7aede0ec89472c9bcb59142344ffba399026be
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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