drd.at

Issued by R3

About this certificate

This digital certificate with serial number 04:3f:a5:90:f6:73:0f:af:d3:93:76:ef:d5:2a:d4:48:1f:ae was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=drd.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3f:a5:90:f6:73:0f:af:d3:93:76:ef:d5:2a:d4:48:1f:ae
Serial Number (int): 370107008151701105942652480252493806706606
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 00:2c:13:d9:d6:21:f1:17:65:00:93:c5:8f:ed:b1:56:1d:82:3d:18
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b6:98:59:d5:9b:8f:c5:dc:b5:92:76:38:8c:73:7b:58:59:5c:93:b3
Fingerprint (sha256): f0:3d:29:f6:2c:76:86:88:3d:eb:3e:a9:1c:55:ca:e9:bb:d4:df:f4:b6:18:5c:ee:ee:c5:a4:f6:af:41:82:16

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate drd.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for drd.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.drd.at
drd.at

Other certificates including the domain name drd.at

(limited to 100 certificates)

Certificate

The complete raw certificate details for drd.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlSk4RTdBFvICQNuZXYo
8PL0qrCJBDAAEHsSLRTmlBjSyOg6MrddLkMh+MkcfV5myyZX48KkVyFOLp1dmvKP
P73F6x2hggyMPdtP2yE+JUEKuxHwnCQxRSpNe4toWOSE7S8Oml4k+YA17vxKZ22j
Q93i4vwt90Swa84T9R0uDSVaZXZ03eHmxZkcgBqeq7PESZ9REj3WTxO1TcqS9eUv
BC+NRf5ZSC0CJUYnjWKo+w22xANcT74Bm7NeyfpILeZWCiUcCmxD4YIMQgr84Hqr
ypksHsnBEN2eo9ja4rGRNt5G+xuVPnoMmc/CzRjfa0MbIRH5gzsLcMMhIad6Vkx6
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370107008151701105942652480252493806706606
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 17:58:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 17:58:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'drd.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19987391726016468766636543379768826791922764844843706227064113554345049157253462214958863335279165486158323643059423923511847938663067166321511310763511209857281301152919149262845203949885993426442311632020520151583768934672318355264967437090644362607309340212338845347908247846969993632780907944334190632848294304760904615829197318014213978543354331010844814443809809137150283907626814071158656542097788993072171175440694702702925744852726810447938443360490434472875074224343462071475434240935842077974741096199971353467606104025246543337775176111547090832890183243564403728350195374442468368301106049881828370446933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							002c13d9d621f117650093c58fedb1561d823d18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drd.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drd.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e2ee1599c0000040300473045022100ea04cbacea2624c14c5b1f214a529362eecb4f956f6fbc16c9f9b5f275ac99c20220042f5964fc4bb6a3b54f68be975f9bccb2a923b7cd56e5e095fecc1e7073d261007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e2ee1599f0000040300473045022100abe5c2490591e03c01517f986151149193874c2393ff3ee473ca80649443b0710220636c22657add8fcb3b2fe5aff27da60049ea8e57b772e87ed7717994766eb0cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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