adventskalender.s-pass.at

Issued by R3

About this certificate

This digital certificate with serial number 04:2a:c4:31:82:63:69:4b:64:c7:9b:95:d2:9c:84:7c:ae:be was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=adventskalender.s-pass.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:2a:c4:31:82:63:69:4b:64:c7:9b:95:d2:9c:84:7c:ae:be
Serial Number (int): 363001788892029737404616074020757526326974
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f3:2d:fb:17:33:0d:f3:db:09:a4:4d:b3:16:a1:6b:69:41:77:9c:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d8:a4:39:8c:9c:e3:b9:e5:17:db:6c:d4:5f:f6:3a:d3:8d:62:ce:a7
Fingerprint (sha256): b8:d1:e5:8f:6d:f0:36:aa:e7:c6:cf:fe:76:fc:2d:6b:49:6d:a2:0a:17:ce:0a:c7:24:94:7f:5a:ca:20:87:9d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate adventskalender.s-pass.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adventskalender.s-pass.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adventskalender.s-pass.at

Other certificates including the domain name s-pass.at

(limited to 100 certificates)
www.s-pass.at
special.s-pass.at
special.s-pass.at
s-pass.at
special.s-pass.at
s-pass.at
special.s-pass.at
special.s-pass.at
www.s-pass.at
www.s-pass.at
special.s-pass.at
s-pass.at
s-pass.at
www.s-pass.at
special.s-pass.at
special.s-pass.at
special.s-pass.at
www.s-pass.at
special.s-pass.at
www.s-pass.at
www.s-pass.at
www.s-pass.at
adventskalender.s-pass.at
www.s-pass.at
www.s-pass.at
www.s-pass.at
special.s-pass.at
special.s-pass.at
special.s-pass.at
www.s-pass.at
bestellung.s-pass.at

Certificate

The complete raw certificate details for adventskalender.s-pass.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 363001788892029737404616074020757526326974
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 19:05:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-26 19:05:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adventskalender.s-pass.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 729769805942590380909508527025973952042175639797945636956312327956786978008927469140174158675645760731911291780623314750301296525083296006715849343844598133041522110404091450487510710887242705498724530873580985126258805411417910609155370015717415498460022969523231251796609503370854116210129344858844768399050238518735390632945734712655015580819009868487977027420036057377508831074781102798470251495911023731760383131365258255410308688368390254403674346529847080246760011222364122431102536716245380763331261911051004063072361404811745590895928349604350115044206771551421010163361336274929540308049877960144668648730103708302754131446914982753923218234208301037984630205406219299735258169588417907247502301039790987750873090521392944693184573316996251612262565796067181711648578018420229230507075712073932198089513584453637181276397163385743255942489552494291078990800256485739290305579062837283915179799095449613124192210074424975711806337574457861190869901470440325797206683851600662327681326726556470965054822173025951553078441257817894247443118811095123671560642848020818979617973883972082573390010619052951542314287826917849198710351806083592294158841989605838356159187998861289240175865871519358332593428616267182021727980708341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f32dfb17330df3db09a44db316a16b6941779cd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventskalender.s-pass.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018de70610e20000040300473045022100b5838d0939bc7c7b36faffcd7364dd17e9e1d8718a5496499050faa03f75b1d1022048fbc33c1025e90425b25b1fe2cd9d10f4307f7a5d53f9aa953d02053da3ee9400750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018de70610e600000403004630440220539612a1fda74625bef59ef8dfc44ac241419c4971187624d0e2a7790a8978f6022062a5169528f3ea4db8ee0cdb76d86bbdd3fcf66f31b2b82e0179631cd9fe46a3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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