cn.production-hirschmann-automotive.hosting.snk.de

Issued by R3

About this certificate

This digital certificate with serial number 04:73:18:ca:60:1c:9f:55:59:dc:4c:0b:fe:0c:93:01:d5:af was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cn.production-hirschmann-automotive.hosting.snk.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:73:18:ca:60:1c:9f:55:59:dc:4c:0b:fe:0c:93:01:d5:af
Serial Number (int): 387614568188192193701484736079767779005871
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 92:a0:7d:f4:7d:48:81:74:fb:35:ca:64:10:8d:68:19:fb:ef:2d:1a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8a:89:51:c9:ff:2f:9f:a8:8b:19:03:41:34:e5:e7:57:59:3c:a0:5f
Fingerprint (sha256): f0:f0:47:75:02:dc:0b:fc:19:a6:ab:c7:86:09:ae:75:e5:ef:72:db:4b:5e:23:e8:51:d7:7e:e0:f1:eb:b1:11

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cn.production-hirschmann-automotive.hosting.snk.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cn.production-hirschmann-automotive.hosting.snk.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cn.production-hirschmann-automotive.hosting.snk.de
hirschmann-automotive.com
hirschmann-automotive.de
production-hirschmann-automotive.hosting.snk.de
www.hirschmann-automotive.com
www.hirschmann-automotive.de

Other certificates including the domain name snk.de

(limited to 100 certificates)
www.snk.de
live.c-1162.maxcluster.net
gitlab.snk.de
fstd.hosting.snk.de
vpn.snk.de
snk.de
fstd.hosting.snk.de
live.c-1162.maxcluster.net
live.c-1162.maxcluster.net
production-hirschmann-automotive.hosting.snk.de
www2.snk.de
fstd.hosting.snk.de
www2.snk.de
fstd.hosting.snk.de
vpn.snk.de
fstd.hosting.snk.de
fstd.hosting.snk.de
*.snk.de
fstd.hosting.snk.de
fstd.focus.de
production-hirschmann-automotive.hosting.snk.de
fstd.hosting.snk.de
pruem.arbhs-dev.snk.de
snk.de
fstd.hosting.snk.de
*.snk.de
production-hirschmann-automotive.hosting.snk.de
production-hirschmann-automotive.hosting.snk.de
ldap.snk.de
fstd.hosting.snk.de
live.c-1162.maxcluster.net
production-hirschmann-automotive.hosting.snk.de
fstd.hosting.snk.de
cn.production-hirschmann-automotive.hosting.snk.de
garant.arbhs-dev.snk.de
production-hirschmann-automotive.hosting.snk.de
fstd.hosting.snk.de
gitlab.snk.de
snk.de
garant.arbhs-staging.snk.de
production-hirschmann-automotive.hosting.snk.de
production-hirschmann-automotive.hosting.snk.de
ldap.snk.de
live.c-1162.maxcluster.net
graf.snk.de
fstd.hosting.snk.de
snk.de
pruem.arbhs-staging.snk.de
snk.de
fstd.hosting.snk.de
hosting.snk.de
snk.de
fstd.hosting.snk.de
gitlab.snk.de
www.snk.de
fstd.focus.de
cn.production-hirschmann-automotive.hosting.snk.de
fstd.hosting.snk.de

Certificate

The complete raw certificate details for cn.production-hirschmann-automotive.hosting.snk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVcQbzWXMIGwMIGulrrH
jNh1iYwAALU3UrrSfDuawlpo+ayhJZvzByhuH819LjdlMZOgbv+mYfsU0edMAJy+
OxywB4qaPCOL/g9/oavuS72E7dzgmhWxHuSZ4Igd//Gvbc7/3c1ZDQy8qrss2DpB
0atVFc3HqbM/H+16p0S4EaGX+8vpoh4aiu7L6x/yQWZN6/8bktT1LEKkQDL3WZA8
Lrx5aBnnEYTBLEIlvDpgIXCCSb2B4zvitv6zXQsxbUfM+JyiPEcLW8wLH7z+LA9d
U0dhXtvKlnWTVOALH7WlbTYF8BPRFLJQzdMLeJFtffqO0o2tLxBYbw5PFg03hUCR
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387614568188192193701484736079767779005871
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-28 01:47:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-26 01:47:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cn.production-hirschmann-automotive.hosting.snk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21882159714762481271981133682955867951994065138301317483043414926933425484876341945841511071916344541410667743974276607970872995663117096269549338854421516877870355057675573949354541935327551960655998554161512774837832065682813808179391959585329471588450445204357253959274308839915682192684455851210768492342091563976041511970082454998887315659227865867524242183935258893587134768418370291462765845370813965071084823088378055362982557442577409624942605013102409024321232084789508045095443869881392499058168725797076707731023557029829164007119880043097969265607613437796766072161751091584038691589141923919823120666937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92a07df47d488174fb35ca64108d6819fbef2d1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (218 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.production-hirschmann-automotive.hosting.snk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hirschmann-automotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hirschmann-automotive.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-hirschmann-automotive.hosting.snk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hirschmann-automotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hirschmann-automotive.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188604119a70000040300463044022040e793c0d6c1e1a992541876ce832a4fdf5da0eadfcfeb0aa23534dc548090aa02200c5bf1ad62a33b05467026a69d8684cb2013a048dd360782464fa969615affd3007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001886041199e000004030047304502201939e9359de8b79dc551affa528bcc485a6f6ff3aa4af6db66b98ae7b1e1e73d022100952085702f18c32af4241d464585d537d5d61828d4b737716235a918501295da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005cfdf58eb459f2a0ed19e189ec724057ea7d6d5eddc2fdc0233a098176e9673d9b7696bf667ca1a9ba76c8374f45b849bf494871dae01105f2188a439813ae96051b48e3c24ff16925237a90e629453f98b5b3eed6027a34c5151c94fc70101c39e9357a1dfe67dad0ce3fe0e3a065d78e4d393ca2cd09817a0d156b73c281ec610096f0630607668e520437c195b5dae1f91170b9373f73bed3223f88046d082e6bbfb857ec1e78250cd5a3c1321f1b7329057022140caff0e100e27be39622c44b5a9a42d8e8a364a9b346b52558e5214e34277c3511776a2c87976fdd94375e29e02b3df62a5a5f721efe8f61519d7727275db134f208cf33595145bbf902