concerto-magazin.de

Issued by R3

About this certificate

This digital certificate with serial number 04:60:07:b6:ba:e0:86:d5:cd:19:4d:e9:6a:b2:e1:de:ea:a5 was issued on by Let's Encrypt.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=concerto-magazin.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:60:07:b6:ba:e0:86:d5:cd:19:4d:e9:6a:b2:e1:de:ea:a5
Serial Number (int): 381126504335766850972191739879547222289061
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1f:00:fa:84:ba:a9:7c:45:39:9d:50:9d:10:df:77:b7:41:9b:f4:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f4:69:2f:26:7e:84:f4:fb:28:15:22:46:b8:0f:b0:a4:95:7d:f7:48
Fingerprint (sha256): ef:09:75:4f:74:06:db:d6:9f:d2:e6:83:62:4b:1b:b5:60:9c:4c:76:f3:7e:b0:b1:e9:06:a9:33:a6:30:b8:19

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate concerto-magazin.de

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for concerto-magazin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

altenburg-1180.de
altenburger-musikfestival.com
altenburger-musikfestival.de
backup.kamprad.isp-vhost04.domservice.de
backup.wege-zum-mittelalter.de
barbarossa-festspiele.de
barbarossa-museum.de
barbarossamuseum.de
concerto-magazin.de
frech-ab.de
frechab.de
gewandhausmagazin.de
kamprad.isp-vhost04.domservice.de
orgelforum-sachsen.de
satt-statt-platt.de
sattstattplatt.de
www.altenburg-1180.de
www.altenburger-musikfestival.com
www.altenburger-musikfestival.de
www.barbarossa-festspiele.de
www.barbarossa-museum.de
www.barbarossamuseum.de
www.concerto-magazin.de
www.frech-ab.de
www.frechab.de
www.gewandhausmagazin.de
www.orgelforum-sachsen.de
www.satt-statt-platt.de
www.sattstattplatt.de

Other certificates including the domain name concerto-magazin.de

(limited to 100 certificates)
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
altenburg-1180.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
concerto-magazin.de

Certificate

The complete raw certificate details for concerto-magazin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381126504335766850972191739879547222289061
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 01:06:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 01:06:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'concerto-magazin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 834963103213472187430621323693110531335605774154848509551365926042414693434854036333672146348654430199593621116663358218122304284779407256826120493119205354206827634526417280868196616765826793521231228971495950568704018567099309499509972298659886897674387203741246727527071343142050969273702440051876531399166114714656691095519478363771655329458464626363791217943904902028427171899306007917994522194048395945248772507309758434032025385332793514493265868937392665833075041688012773094740419385675039691218787741510222225845936762576037756272056326777049973423794415225561912838069084698402472321763312793913611365888090580609081816974587480464205092824370195844542751843692021215602479338950261038780786697714607797843099298286379147929579711770884327982351924643653097713918565435692379181244342161619381101346174642957211777399013021300272312119433963713320163252271427729288939336351737449955808812577094459177299340707657347025453121363455388454857416291283756513684788219786765040530570600407681902077694500035973729113298324829823576641172422184023990196819236096879890568428683448376942339058272445799974738475459902930994454431479209033114934069793974948008018995407238793713849833398242545913609196484971545121148439735337471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f00fa84baa97c45399d509d10df77b7419bf498
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (725 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburg-1180.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburger-musikfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburger-musikfestival.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.kamprad.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.wege-zum-mittelalter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossa-festspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossa-museum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossamuseum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concerto-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frech-ab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frechab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gewandhausmagazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamprad.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgelforum-sachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satt-statt-platt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sattstattplatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburg-1180.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburger-musikfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburger-musikfestival.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossa-festspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossa-museum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossamuseum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concerto-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frech-ab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frechab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gewandhausmagazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orgelforum-sachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satt-statt-platt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sattstattplatt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c5179f25600000403004630440220259d8d8e317a158ca1602cb7cee33dd4038f28783a43c38039e8a7f3bb8f0c4e02202117f2b182490065e28ff2e3ad298367631568a0f50e37b62244b390cbc6cb850075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c5179f24f00000403004630440220710803acfe9f506a1bef368bb7ae6cf16edf4c1ae6cc62a45a7ffa42a75d37290220362b310970cda18f5821adc08c7718eff5b529b341b7c4b501096594e9a5f028
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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