debian-archive.anexia.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d0:75:dc:52:ff:e3:d5:93:b4:2f:7e:fe:7d:72:cb:3c:ea was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=debian-archive.anexia.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d0:75:dc:52:ff:e3:d5:93:b4:2f:7e:fe:7d:72:cb:3c:ea
Serial Number (int): 332272253779082933395976752452981217770730
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 55:e1:cf:2d:3b:16:c0:7e:60:a0:76:3a:21:9f:7b:2a:9a:8a:1d:00
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): be:fa:14:e9:f1:09:ef:ba:41:6d:41:24:1f:4a:8b:40:a0:ff:94:c1
Fingerprint (sha256): da:3f:3c:1f:ba:a3:7a:05:83:fa:03:b8:9e:03:cc:07:a9:b9:ce:21:c5:9d:43:83:81:76:9e:50:69:a2:fc:ff

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate debian-archive.anexia.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for debian-archive.anexia.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

debian-archive.anexia.at
debian-archive.at.mirror.anexia.com

Other certificates including the domain name anexia.at

(limited to 100 certificates)
*.anexia.at
*.anexia.at
centos.anexia.at
debian.anexia.at
*.anexia.at
webmail.anexia.at
debian-archive.anexia.at
debian.anexia.at
*.anexia.at
webmail.anexia.at
webmail.anexia.at
*.anexia.at
centos.anexia.at
office.anexia.at
centos.anexia.at
debian.anexia.at
*.anexia.at
centos.anexia.at
debian.anexia.at
debian.anexia.at
debian-archive.anexia.at
debian.anexia.at
centos.anexia.at
bugtracking.anexia.at
centos.anexia.at
centos.anexia.at
debian-archive.anexia.at
*.anexia.at
debian-archive.anexia.at
ticketsystem.anexia.at
*.anexia.at
webmail.anexia.at
*.anexia.at
ubuntu.anexia.at
debian-archive.anexia.at
*.anexia.at

Certificate

The complete raw certificate details for debian-archive.anexia.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332272253779082933395976752452981217770730
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 21:42:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 21:42:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'debian-archive.anexia.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 649407540048963693642916404884251568246218402170141816502068446994842255553204247867220907911316778355677426041233076692851459520362972712312802527499674143647345778334800364586922630364111003468190550014613909961295271682338575414506268239529249388668729966007416414186512304632439539440293396511947316734310172691042719118836956741676290868817731339294768698677815906177662975965433988244482219062896405861331321603182281237688831518212093240245595236386478612207041031883456467457239852677942886920861442793562160969251388113887972471047846694367240904700257910006339528344468515777807220169325727177259331230155180250327136524914917257747611663457702603019475592981430558992290673731521209435957277326412223442650682046938375296769413533981474467773541427733981537874681183360591678809449163222703108897469486611103059710436317529977704642399923416724118294499296204818084077303915390748716175629982186658624177095750034951986103238182360961184990815395641737508873077006691535384916646278008915860782995642191129937026706092496577100932717441324793234022452871362306953353413777706100515241576170148420255058072003080113965918907976710561506143360248585035824775715243766147161015083112022613444551484610736820641156004321982503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55e1cf2d3b16c07e60a0763a219f7b2a9a8a1d00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debian-archive.anexia.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debian-archive.at.mirror.anexia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c30731dbd0000040300473045022100aed4556fc30f5d3ce9781c7e1b0263aa543cfda34df815c3d8f46d332297b195022073ab8db66a070203220201c12031e73fedc09b0158405b5bc0d0205b3ead8713007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c30731db90000040300473045022071e4c451b0f27f8c39f9bc6dbe4b397dcac66d0d5cb4b3150398fcfd7a66a191022100b6eb90e315b84c21084ac1606e6fbd90d53869b772e4e1898e115856d1f6c01e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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