analytics.igha.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e5:d1:0a:ae:61:42:be:e2:36:4a:7a:e0:1f:31:f2:4e:37 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=analytics.igha.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e5:d1:0a:ae:61:42:be:e2:36:4a:7a:e0:1f:31:f2:4e:37
Serial Number (int): 339539383931108340412782210814359993732663
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5f:1d:68:cb:c5:dc:0b:bd:d0:d0:b1:d2:d8:10:a5:57:17:2c:0d:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6e:47:4b:42:81:7f:cc:1b:6f:11:af:c0:a4:cb:ca:c2:79:87:6f:45
Fingerprint (sha256): fa:2d:bf:6b:d4:dc:82:1f:94:41:48:b8:fc:1b:1f:21:7d:2f:09:9f:fa:26:ca:f9:5a:10:33:ef:f7:d8:e5:38

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate analytics.igha.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for analytics.igha.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

analytics.igha.de

Other certificates including the domain name igha.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for analytics.igha.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339539383931108340412782210814359993732663
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-24 22:11:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-25 22:11:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'analytics.igha.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 645568302026121204285246017734788537132725405813073552839991434383176248163417834102008890499834133967478941599492311792780372716686366743767583087075786933157861427698422754371182529545646533300217593029090834844711351158623739237360816495013706698918626077733088140625957821749336017587026628672081697894461971638465450208139007553698997216903744461318670355317611757108862227225712685728202838433610183844680414035597588472564343366607780107180912668136937954055163155908359681407794322037397441740358459538775476421027628574529757515606799378083493688659244549189083190402284231571180880574909543451072446149911264190627846443683024209404594214040775383134948556676710795188963388387156499786124369849445333309222315777635447096338943739220570830109806733145472712188832954987157836204531635983815051070043448513748686027061005068467008107718856041946146399935732542740317467229730638371897983933095143252807139958244466530788332647914211949246204240092151515065164552139052880747869230580292159189605375975315901875903420876785240320862236268053210294440796130432352315862367936033721033036128465438615160842870159003985559374839323559143315619958025707906897649756366617670661152127619668438290861696878899480910900222410810537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f1d68cbc5dc0bbdd0d0b1d2d810a557172c0df7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.igha.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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