young.or.at
Issued by R3
About this certificate
This digital certificate with serial number 03:85:12:e9:fb:cc:ec:3f:60:c8:ef:06:40:20:32:12:8d:67 was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=young.or.at
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:85:12:e9:fb:cc:ec:3f:60:c8:ef:06:40:20:32:12:8d:67Serial Number (int): 306619553611978193432227666561012805569895
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b7:79:7a:d3:51:8a:49:a4:f0:83:03:07:c7:06:ea:a4:64:6c:17:fc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 7c:4a:85:f5:6f:e9:cc:09:a9:aa:5e:7d:63:a6:6f:2a:2d:7e:66:ec
Fingerprint (sha256): b8:80:41:23:81:db:73:78:74:5f:a0:a0:85:4e:09:2e:55:74:cd:06:22:74:a5:0d:19:73:43:11:43:17:61:b4
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate young.or.at
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for young.or.at
Public Key Algorithm
RSA
Key Size
3072
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
young.or.at
Other certificates including the domain name young.or.at
(limited to 100 certificates)
filemanager.zeus.lima-premium.de
app.stg.young.or.at
young.or.at
www.vulkania-zeitboerse.de
*.fuenf-tibeter-harz.de
young.or.at
intranet.young.or.at
www.yippie.at
young.or.at
www.yippie.at
stage.moki-analytics.com
*.einfach-gute-texte.com
outmail.beautyled.com
www.young.or.at
www.yippie.at
intranet.young.or.at
www.young.or.at
fm.gb.jonte.info
www.young.or.at
phpmyadmin.antifax.com
intranet.young.or.at
desmato.lima-city.ch
*.thomaspiskorz.de
young.or.at
yiixddrrnzflymu.lima-city.info
www.young.or.at
counter.mclauchlan.de
game.fujimori.de
young.or.at
www.von-reppert.eu
www.lenarupp1998.lima-city.de
www.chainsaw72.lima-city.de
www.your-best-family.lima-city.de
young.or.at
app.familiejeske.de
ud.gb.jonte.info
postmaster.sidbrowser.com
young.or.at
store.gullshock.com
www.yippie.at
intradaten.ch
www.yippie.at
*.mein-dsgvo-datenschutzbeauftragter.de
freeminecraft.lima-city.de
intranet.young.or.at
robin-heidrich.lima-city.de
www.ja-nowak.lima-city.de
erdri.ch
informatikmitsophieundtergite.lima-city.de
www.yippie.at
otr.matzl.eu
young.or.at
www.yippie.at
julianbelz.com
www.yippie.at
app.stg.young.or.at
www.munabliz005.lima-city.de
intranet.young.or.at
forum.lifeofme.de
www.young.or.at
okgami.lima-city.de
sito.martenstop.com
young.or.at
app.stg.young.or.at
young.or.at
www.vulkania-zeitboerse.de
*.fuenf-tibeter-harz.de
young.or.at
intranet.young.or.at
www.yippie.at
young.or.at
www.yippie.at
stage.moki-analytics.com
*.einfach-gute-texte.com
outmail.beautyled.com
www.young.or.at
www.yippie.at
intranet.young.or.at
www.young.or.at
fm.gb.jonte.info
www.young.or.at
phpmyadmin.antifax.com
intranet.young.or.at
desmato.lima-city.ch
*.thomaspiskorz.de
young.or.at
yiixddrrnzflymu.lima-city.info
www.young.or.at
counter.mclauchlan.de
game.fujimori.de
young.or.at
www.von-reppert.eu
www.lenarupp1998.lima-city.de
www.chainsaw72.lima-city.de
www.your-best-family.lima-city.de
young.or.at
app.familiejeske.de
ud.gb.jonte.info
postmaster.sidbrowser.com
young.or.at
store.gullshock.com
www.yippie.at
intradaten.ch
www.yippie.at
*.mein-dsgvo-datenschutzbeauftragter.de
freeminecraft.lima-city.de
intranet.young.or.at
robin-heidrich.lima-city.de
www.ja-nowak.lima-city.de
erdri.ch
informatikmitsophieundtergite.lima-city.de
www.yippie.at
otr.matzl.eu
young.or.at
www.yippie.at
julianbelz.com
www.yippie.at
app.stg.young.or.at
www.munabliz005.lima-city.de
intranet.young.or.at
forum.lifeofme.de
www.young.or.at
okgami.lima-city.de
sito.martenstop.com
young.or.at
Certificate
The complete raw certificate details for young.or.at in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISA4US6fvM7D9gyO8GQCAyEo1nMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MTAwNjAxMTBaFw0yNDA4MDgwNjAxMDlaMBYxFDASBgNVBAMT C3lvdW5nLm9yLmF0MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAkzsq hmIgDq9lfrzT8lpko3ewMLi2HszWW9cqF8Lw4lVKERJ+LFqJVk7H7oAkx/Oxq3vg DdMEPOc4eehelPLL+dcsG/YmYsbBIfEDSWfR/yv7KKVKbVlVieBreWVd7frr68fa FqXd5tROlRA1Ew7BThwwPeva7kRVcUsotZZV3GNbFrjogg4Z5SLK5g85K9K6NVte YaQy+7/AtU+E9xcs1ThvLi9qxiUojCB5dMgQ9F/9tcFUEAFdlo0ucFKKWFxbLTeh Xk0a8qVhkC/44HET6P2ZjcyqHT17fYyGcF0OQ7caZ16XiTitygffawbbLDyswFYZ 0/nAkN2LCb9S0mBgE35a6r8FTCC3SnVLKjKGx4zii9MhRuM1RjR7XWWrLM3UtGFl wiV7aNIjXfXquU9S7rN4bKTSPfV1ltqOupDkVaanE+tTjmsEYKNCxPGfqP5AH1IO axhJXDtE7jBLcD/SOrU6xBVNU50inI7wwTgbgl1kJtuU92JB09ynUcknxvofAgMB AAGjggINMIICCTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLd5etNRikmk8IMDB8cG 6qRkbBf8MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMBYGA1UdEQQPMA2CC3lvdW5n Lm9yLmF0MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB 8gDwAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGPYU5GWwAA BAMARzBFAiEAtOaRZyhA7z4eH0uJGYldzGdc8s2e5RGPpD1veByAa4kCICEVhkPL RvtD0jkncKDVN9V3HXyRRlOSlb8ZFmTKHAvHAHYAdv+IPwq2+5VRwmHM9Ye6NLSk zbsp3GhCCp/mZ0xaOnQAAAGPYU5GrwAABAMARzBFAiBHntTwXFBNjm6lbtHm9UsD dQ9bZTqFIKhH7ZkAR55VowIhAIlyLMGwUMpnsEowk2167eDsiUcsm8tZFCNE/7o5 kCa+MA0GCSqGSIb3DQEBCwUAA4IBAQBmoPdh0RIGkVXhJWUOp4xyi7bVPy7bJgj2 u5DL4zuUCUwOLakGrL/OcjB3O7owb5VG1x20JyFvkE2v1iid3PJMVJnfyz6v34yg 1LiqErGoPXuAP5mWL5trWU8GzL58lNE0GNt5CExC6YQNjJ7+/Gb2G+u065mKduzz p+uE3766DDbxNAcvWXrzr8FmJfjUAbAfIcrQjO6kST4J6Lv2v3MGFBUCborq7p9M +8n+XQHq0yiyOb0Ejtu/juKAwLVjq6D6LQJYskzS+uuCSBBD63Cb5wPTdNEVd7n9 6amYr/TD0LtiWd0admHNmcQcy21M3pI0mHaaIcvpeJupdH+1d7iW -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAkzsqhmIgDq9lfrzT8lpk o3ewMLi2HszWW9cqF8Lw4lVKERJ+LFqJVk7H7oAkx/Oxq3vgDdMEPOc4eehelPLL +dcsG/YmYsbBIfEDSWfR/yv7KKVKbVlVieBreWVd7frr68faFqXd5tROlRA1Ew7B ThwwPeva7kRVcUsotZZV3GNbFrjogg4Z5SLK5g85K9K6NVteYaQy+7/AtU+E9xcs 1ThvLi9qxiUojCB5dMgQ9F/9tcFUEAFdlo0ucFKKWFxbLTehXk0a8qVhkC/44HET 6P2ZjcyqHT17fYyGcF0OQ7caZ16XiTitygffawbbLDyswFYZ0/nAkN2LCb9S0mBg E35a6r8FTCC3SnVLKjKGx4zii9MhRuM1RjR7XWWrLM3UtGFlwiV7aNIjXfXquU9S 7rN4bKTSPfV1ltqOupDkVaanE+tTjmsEYKNCxPGfqP5AH1IOaxhJXDtE7jBLcD/S OrU6xBVNU50inI7wwTgbgl1kJtuU92JB09ynUcknxvofAgMBAAE= -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 306619553611978193432227666561012805569895 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 06:01:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-08 06:01:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'young.or.at' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3341229623759818765979219416882531727671353178866432656528716827395164968275585864915097457812622767199455402394701026918346593916440692328226439857934936548885923912070245495799158168097453198484271547718659222882755172168799220918249452793432363310994761805580989814421881924684218221239818733943372935665377796631268378044543092581479649534659622576358803171335331003828755970972771542392255072545490717355076807158094879921581915148836631494576419588143234077963984909605208832044012941177594923298150967341422979854416456433314873349075506837500042051551742385475179412103737256207788769179858230454287934909757038026747163993021795976623744402004881608060935856259980069220540767781229343043729229772372368187657866183971470725918428763486969289580485658704340980593877390636115880942255657876225936073604550916298652894233132776021443352465574598722329877498733190332201447209404227958198796714213767847037328924539423 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b7797ad3518a49a4f0830307c706eaa4646c17fc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'young.or.at' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f614e465b0000040300473045022100b4e691672840ef3e1e1f4b8919895dcc675cf2cd9ee5118fa43d6f781c806b89022021158643cb46fb43d2392770a0d537d5771d7c9146539295bf191664ca1c0bc700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f614e46af00000403004730450220479ed4f05c504d8e6ea56ed1e6f54b03750f5b653a8520a847ed9900479e55a302210089722cc1b050ca67b04a30936d7aede0ec89472c9bcb59142344ffba399026be . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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