concerto-magazin.de

Issued by R3

About this certificate

This digital certificate with serial number 04:dc:18:59:53:8c:56:d2:f4:fd:e9:35:46:82:46:a3:dc:2d was issued on by Let's Encrypt.

With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=concerto-magazin.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:dc:18:59:53:8c:56:d2:f4:fd:e9:35:46:82:46:a3:dc:2d
Serial Number (int): 423343629730525506726340301913446609574957
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cc:09:0c:fe:26:73:ef:24:10:95:b2:3e:bb:fb:bd:67:ba:b9:81:72
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a0:90:0b:7e:e0:79:74:cb:7f:f6:40:81:a0:14:2d:b2:8f:c1:6f:93
Fingerprint (sha256): fe:f2:b7:93:9c:0d:a0:8e:73:b8:3d:97:06:74:49:ff:7b:30:02:79:88:52:1a:77:7b:78:ec:49:5e:10:1a:e2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate concerto-magazin.de

32

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for concerto-magazin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

altenburg-1180.de
altenburg1180.de
altenburger-musikfestival.com
altenburger-musikfestival.de
backup.kamprad.isp-vhost04.domservice.de
barbarossa-festspiele.de
barbarossa-museum.de
barbarossamuseum.de
concerto-magazin.de
frech-ab.de
frechab.de
gewandhausmagazin.de
kamprad.isp-vhost04.domservice.de
orgelforum-sachsen.de
satt-statt-platt.de
sattstattplatt.de
wege-zum-mittelalter.de
www.altenburg-1180.de
www.altenburg1180.de
www.altenburger-musikfestival.com
www.altenburger-musikfestival.de
www.barbarossa-festspiele.de
www.barbarossa-museum.de
www.barbarossamuseum.de
www.concerto-magazin.de
www.frech-ab.de
www.frechab.de
www.gewandhausmagazin.de
www.orgelforum-sachsen.de
www.satt-statt-platt.de
www.sattstattplatt.de
www.wege-zum-mittelalter.de

Other certificates including the domain name concerto-magazin.de

(limited to 100 certificates)
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
altenburg-1180.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
concerto-magazin.de

Certificate

The complete raw certificate details for concerto-magazin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423343629730525506726340301913446609574957
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-28 00:09:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 00:09:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'concerto-magazin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 777322711856022539384895463025955844113014576018058663042267873205716476224060928779111838768658784578225999077111435724629255756753603500510952069147685559129659305126959436185688053573208961729169489016029955300074524845512558143949926826771134304674656351569429593886785252880375877563687590802598009322734921895702701683047453163401460573652589961576871249713356760360957901524020237242759030391468374120732393610270571806476550930407891591108904878087354239759961419846613553214019427160565727452286566809961557201198985839241416935773047599576190609303236693372952365339324671042754874997320528687717875519747616660197495783124955178820967014980084491638098300352598557589333397692609857979819722066599168283274421450843908087609018544499384362078185462907164177243453997297326672810101330496435704644910436653631230926401062821032434928217755188581162382640922583545524049454674391581012090647695786627487624425378426789191101572836126697384779268669031017059607132548421639658447435516533348523239984136724277372527387319778641808863216155571688231618135974575389579680088041321821487118585909000304138758338754835235993768502171873526315210259960162863829186430995298821415953779141139429849680689204045349424575050554560799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc090cfe2673ef241095b23ebbfbbd67bab98172
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (787 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburg-1180.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburg1180.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburger-musikfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburger-musikfestival.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.kamprad.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossa-festspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossa-museum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossamuseum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concerto-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frech-ab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frechab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gewandhausmagazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamprad.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgelforum-sachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satt-statt-platt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sattstattplatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wege-zum-mittelalter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburg-1180.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburg1180.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburger-musikfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburger-musikfestival.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossa-festspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossa-museum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossamuseum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concerto-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frech-ab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frechab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gewandhausmagazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orgelforum-sachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satt-statt-platt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sattstattplatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wege-zum-mittelalter.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188ff8c4c13000004030046304402204de25ced6c12b409d0916aacf3d38395c7e4b72780df510eaf9aedc6de7a26bf022009967e4287c3c5eab5250e2f5e2755dc19c3c16b869cd1177563cfbf3b322163007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000188ff8c4c0c0000040300483046022100fa40800240a1d9334d313b6ce27937572e6e68ea3b1ae791e4d6bd12aef03a99022100b7b89621c5c808bb7c9f29da1dc5e791be19fd2812c813f8cbee81c118f34ae1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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