casc-datenschutz.at

Issued by R3

About this certificate

This digital certificate with serial number 04:19:52:49:f2:41:17:c1:d8:66:f1:4c:69:a7:ef:3b:d0:51 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=casc-datenschutz.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:19:52:49:f2:41:17:c1:d8:66:f1:4c:69:a7:ef:3b:d0:51
Serial Number (int): 357065583546889791464045574783719536578641
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c9:b0:c1:da:6c:4e:59:93:4e:47:8d:2f:54:6f:fd:27:df:e2:16:2e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 80:0b:65:b2:7b:05:fc:cd:48:6a:5a:c5:42:5c:b4:b5:56:d2:89:75
Fingerprint (sha256): e2:e9:91:c0:26:d4:1e:ba:54:45:02:94:19:0a:ff:83:3d:ac:71:d7:05:39:8b:20:26:e8:b0:78:65:0a:00:b7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate casc-datenschutz.at

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for casc-datenschutz.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

casc-datenschutz.at
datenschutz-beratung.at
datenschutz-fuer-kmu.at
datenschutz.casc.at
datenschutzbeauftragte-wien.at
www.casc-datenschutz.at
www.datenschutz-beratung.at
www.datenschutz-fuer-kmu.at
www.datenschutz.casc.at
www.datenschutzbeauftragte-wien.at

Other certificates including the domain name casc-datenschutz.at

(limited to 100 certificates)

Certificate

The complete raw certificate details for casc-datenschutz.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG7zCCBdegAwIBAgISBBlSSfJBF8HYZvFMaafvO9BRMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MTAyMTA1MzVaFw0yMzEyMDkyMTA1MzRaMB4xHDAaBgNVBAMT
E2Nhc2MtZGF0ZW5zY2h1dHouYXQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
AoICAQCo3M5ToTIsfGtS670Cqmkc9MDb3ut/0zKDzCwtMIcMpxoBDI27/2C16TnY
o+FfckXN/8wtpOK9IH9mATB/TIW/QyhfKBF/0yzn2AtRt9INsfczaUOUgPBfur9a
e00cSFelIVzKhmaQ8xr+DEfA1SwQANI+m/flVD6QzInwi4yngtjZ5M160fAMYLV3
mT+U3/YCXAglnByf2PYSLQTGyROlPFfHcEbPev1xiOX/cib4fkUPDFbGcURRgBH6
/TyNxcMxpK9sFhe5Vf3x2z9l4ONAk9zyFEJSGGBFz13cv1jgdCA6rX7Eqi+XtDrj
MJ/2XBnBjCdfHTu4vtHNtIO6L+ZcYdXMd0ZoyStWGXvoPhyE3RBWmhnnLycTaN4t
81xjB1sa9PJngSwiKFSMzVfDndGC0Pg6WLcHMH543jmmz3n4pW73FPK0kztwUG4z
0tN0OCopdKUuM1+Vw2n0HZXMqa+4gQhrNhWAQqKc8EgXeK6STkLS6lCHFcrGluTT
Ak+6pCBTsZbVmrc1DazJpW/LinMXRKUYLwjeNHDq2ivpIUE648xsOMJybS+lrj3U
IA1NWm0S7+diu8qL+XjYmcP4+tkXX6Sr8mJLVj3KlrRkoV0OmotdQH1568MacNGX
ZAkv69vjetn16xIXm6ymCy9Lf6fOII8d50vQs3GqlQ7FXCrW9QIDAQABo4IDETCC
Aw0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTJsMHabE5Zk05HjS9Ub/0n3+IWLjAf
BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw
IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW
aHR0cDovL3IzLmkubGVuY3Iub3JnLzCCARkGA1UdEQSCARAwggEMghNjYXNjLWRh
dGVuc2NodXR6LmF0ghdkYXRlbnNjaHV0ei1iZXJhdHVuZy5hdIIXZGF0ZW5zY2h1
dHotZnVlci1rbXUuYXSCE2RhdGVuc2NodXR6LmNhc2MuYXSCHmRhdGVuc2NodXR6
YmVhdWZ0cmFndGUtd2llbi5hdIIXd3d3LmNhc2MtZGF0ZW5zY2h1dHouYXSCG3d3
dy5kYXRlbnNjaHV0ei1iZXJhdHVuZy5hdIIbd3d3LmRhdGVuc2NodXR6LWZ1ZXIt
a211LmF0ghd3d3cuZGF0ZW5zY2h1dHouY2FzYy5hdIIid3d3LmRhdGVuc2NodXR6
YmVhdWZ0cmFndGUtd2llbi5hdDATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisG
AQQB1nkCBAIEgfQEgfEA7wB2ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl
7bSZAAABioEg9P8AAAQDAEcwRQIhAO9CmGJcd1qt2A1VJdeOvN62BzEJJ5eYFVmi
+APSATncAiAuHtS7nxr9Cye/OayUwi9BM+tS7HMnCKc+7ByDJQEmjgB1AHoyjFTY
ty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABioEg9Q8AAAQDAEYwRAIgVpT5
xwY8Ye6iJmaJn0uhhhzqdhNCAzrhd2+MJDDEafUCIFYlCibRuovpuCiP2QRuLWhh
os7Ck5tW2Rpv82bbL66iMA0GCSqGSIb3DQEBCwUAA4IBAQCWo2d476fZPW4m7bxH
GvY0LlutQTfsR0WACP830yX5IqfKYfXgOiP9SF35InS2DYxR6lx/ARvcsxQhbdc2
KWVU+tIKN6ODjeZAiiODgH+obFipsWHLornkfHV+YMigwjQmbAPhobQFN6WTAKIF
nsmsRr7BVsYIeCjdMHsLe8gxdx8D2Q72614HaJD5W/QqG6hSAtgD/No06kGn7Vnl
MFGy9zu4uvBtPT5e/RUs2h4M8s+RhOc1y2IsXlpBxnkDKLUGM7MHAJvIqkifRJmS
p/D7Bl64CeHm8uCGS4otgce+ak11zzRY4i9x8h42ZxXftML4QghqEsk1knYLARHQ
3v7V
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357065583546889791464045574783719536578641
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-10 21:05:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-09 21:05:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'casc-datenschutz.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 688898991472433294373856746932617830362062625974711972512334603488810416765651962936687521319165027775305285829108554137208996974944703251482856760872061291512249770908922739382229494544206515930259686144797410835329391943724882850156708898503476056890024494893556917917509860470324659298525060150592497552908452718072386711595057599245450018078622185740381502237872931902961149825234773723063697897977104367163881781399010046413137407220191930201420197534398981627731678101014182690513587876376640598671627366149015431478524637922902698717821462673889978971397223857308266349108786146974307288260557329399518814635835295193747521862156591254742363909679527412385651369964225325768794626908984485435622943273071096394037221867203027104484632098659910544792340166044172292407255483131515920835439409421944913860526359735453864523139344372860344589754898271055102496623812346839721813317060889617774775229639895620495052176102754660080340183628968575878220590100842901710922159622233488204917906810622820898703657348245686552657938818905351363381466356133807194564940697643608091619170193553031715329057831852971106123664088380308093987934033875854365689521795090999030511618460848039483562109306430842442142252245433036243886848792309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9b0c1da6c4e59934e478d2f546ffd27dfe2162e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (272 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casc-datenschutz.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datenschutz-beratung.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datenschutz-fuer-kmu.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datenschutz.casc.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datenschutzbeauftragte-wien.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casc-datenschutz.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datenschutz-beratung.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datenschutz-fuer-kmu.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datenschutz.casc.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datenschutzbeauftragte-wien.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a8120f4ff0000040300473045022100ef4298625c775aadd80d5525d78ebcdeb60731092797981559a2f803d20139dc02202e1ed4bb9f1afd0b27bf39ac94c22f4133eb52ec732708a73eec1c832501268e0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a8120f50f000004030046304402205694f9c7063c61eea22666899f4ba1861cea761342033ae1776f8c2430c469f5022056250a26d1ba8be9b8288fd9046e2d6861a2cec2939b56d91a6ff366db2faea2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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