www.kaminholz-gmbh.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d1:84:a1:52:9e:60:60:84:cd:7b:fd:af:34:01:c4:93:82 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.kaminholz-gmbh.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d1:84:a1:52:9e:60:60:84:cd:7b:fd:af:34:01:c4:93:82
Serial Number (int): 419744454144460422874467551903466417066882
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 32:5c:5d:80:4d:40:05:b6:47:0d:1b:78:bd:21:99:24:98:a6:b3:4a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 74:24:a6:88:de:bd:fa:af:2b:1b:2b:1c:8c:29:40:97:fe:1b:6b:46
Fingerprint (sha256): de:59:81:f4:0c:c9:42:fb:7d:5e:ad:b9:80:d5:2f:8a:7c:1c:5c:bd:4c:27:c7:b9:c9:e9:2a:f5:31:6f:ab:67

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.kaminholz-gmbh.at

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kaminholz-gmbh.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forstgut.at
kamin-holz-gmbh.at
kamin-holz.at
kaminholz-gmbh.at
kaminholzgmbh.at
www.forstgut.at
www.kamin-holz-gmbh.at
www.kamin-holz.at
www.kaminholz-gmbh.at
www.kaminholzgmbh.at

Other certificates including the domain name kaminholz-gmbh.at

(limited to 100 certificates)
www.kaminholz-gmbh.at
*.kaminholz-gmbh.at
www.kaminholz-gmbh.at
www.kaminholz-gmbh.at
www.kaminholz-gmbh.at
www.kaminholz-gmbh.at
kaminholz.gmbh
www.kaminholz-gmbh.at
www.kaminholz-gmbh.at
www.kaminholz-gmbh.at
www.kaminholz-gmbh.at
www.kaminholz-gmbh.at
mygf.app
*.kaminholz-gmbh.at
www.kaminholz-gmbh.at
www.kaminholz-gmbh.at
www.kaminholz-gmbh.at
www.kaminholz-gmbh.at
www.kaminholz-gmbh.at
www.kaminholz-gmbh.at
www.kaminholz-gmbh.at
www.kaminholz-gmbh.at
www.kaminholz-gmbh.at
kaminholz-gmbh.at
www.kaminholz-gmbh.at
www.kaminholz-gmbh.at

Certificate

The complete raw certificate details for www.kaminholz-gmbh.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1wrxSV5rIgyXF+EDOaV
FPfJvKbkIZtKaGgmeDN/u7CY+963jMlIRj4Dvzzn5WqdZQuXANo+OqWU7ajHuVij
Vp40sD1NTb18IFnkB5bmX3Jea9u4VanWbBZ7myMnHoiQPyAwXs8s5k3hDpEDFw20
G7ft8/zROgXnjhEBATZKpikNDU+dfB5fue+qloj15CkGn5Y4zkvb4PYZvKPNPDKA
ZGfKCeBeCzO8wDeCsljfdTOKsWBqFCV3wG6Nl0uB3nuIz0Cgbz9FbmbM97q+GiC0
0tALyFWzFepOvg89Qbx4K8XSYofIN8t++WLAHgK45lviKpU9Nwdxu3WsWVwa1xfo
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419744454144460422874467551903466417066882
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 08:12:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 08:12:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kaminholz-gmbh.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24661920671112469389847598630267114996608124541280721147962546274581728882224632546711696517796385460799995701364875873637480540775072175422861272070965255773304480152566950970740919867477056216473799387098557314648064859190727441212217841320059285886420432995091100061218958726184464768700378566953146401185431089406481657779081243206940029172400021585723467912716152999689289725101456316165410180437098733102090315974453999760095463177233298660671359116109187385058948695811054537503244065581580096166675453408323339110989940861455991788182030207628336235140536069162270497499896791851145674607750771523330070013983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							325c5d804d4005b6470d1b78bd21992498a6b34a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (193 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forstgut.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamin-holz-gmbh.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamin-holz.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaminholz-gmbh.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaminholzgmbh.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forstgut.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamin-holz-gmbh.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamin-holz.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaminholz-gmbh.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaminholzgmbh.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d628b19120000040300473045022006dac4f1752000ede2408c38b0c89f26ccd2c38a2e637be929fb85192a853c76022100835de0bcd830921c22c2c7e62c380850a9c1d32efa1304a9acd234aae5a3752d00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d628b19070000040300473045022070f3ce9adb177906636b8b020551ebf75304f0b9ee22bd61d2c78c7eae86341a022100cbd44eae818226f6120347a6495fa5dd79562fa26a03a9a6a2a6656160692282
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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