ihk-sh.de

Issued by R3

About this certificate

This digital certificate with serial number 04:a1:4c:57:c7:92:12:79:64:27:56:01:79:af:52:62:5c:5e was issued on by Let's Encrypt.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ihk-sh.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a1:4c:57:c7:92:12:79:64:27:56:01:79:af:52:62:5c:5e
Serial Number (int): 403336081906590965677371515206130227895390
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b1:80:e6:92:a9:d2:ce:a3:e2:80:3b:56:53:05:95:7f:b7:66:52:15
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ae:03:f4:a9:b8:c3:e9:0f:1e:ec:1b:df:65:7c:9c:46:59:3a:e1:79
Fingerprint (sha256): ff:22:b2:c2:81:cb:9c:2a:8b:91:a7:df:f8:7d:5c:c0:85:f6:4d:7d:b0:37:64:e3:d2:0b:2d:2f:a8:aa:01:5d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ihk-sh.de

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ihk-sh.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amtliches-verzeichnis.ihk.de
essen.ihk.de
essen.ihk24.de
fitnord.ihk.de
gera-ihk-wahl.de
handelskammer-bremen.de
ihk-koeln.de
ihk-lueneburg.de
ihk-niederbayern.de
ihk-niederrhein.de
ihk-schleswig-holstein.de
ihk-sh.de
sihk.de
wuppertal.ihk.de
www.amtliches-verzeichnis.ihk.de
www.essen.ihk.de
www.gera-ihk-wahl.de
www.handelskammer-bremen.de
www.ihk-koeln.de
www.ihk-lueneburg.de
www.ihk-niederbayern.de
www.ihk-niederrhein.de
www.ihk-schleswig-holstein.de
www.ihk-sh.de
www.sihk.de
www.wuppertal.ihk.de

Other certificates including the domain name ihk-sh.de

(limited to 100 certificates)
ihk-sh.de
ihk-sh.de
ihk-sh.de
www.ihk-sh.de
ihk-schleswig-holstein.de
ihk-schleswig-holstein.de
ihk-schleswig-holstein.de
ihk-sh.de
ihk-sh.de
ihk-sh.de
ihk-sh.de
ihk-schleswig-holstein.de
www.ihk-sh.de
ihk-sh.de

Certificate

The complete raw certificate details for ihk-sh.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw3GMd/Je7dz/biifQBXQ
lH7stDSN3OemYeLluENAF7vmUHYEjywQYHEjiZtIYzTf/9bjBUZhL+Z94xq8xZgB
qqSMlBIrMfo0N+vimn9KJIXXwM8QrP6/vUsblivjrWpu1qx6K6eleq0RGgVMrmiF
lPCER0VgrtkuGEj6iFDTAH3Jvx+oPMZdZvlyjS/BAiQxccKycUf9niibBEEYCViP
OS22O80C8LX8ECzZUfdDnscZ9NZQ/n8RK1RgoQTzIrcPoiCAfBIksStGGc/tIILQ
Qowco2873ymH9FiXfBQyY3uRBuKgsnP3/ob58YA0x3GNr5Vp62++2tqE+K00RvaX
nW9dBJT97Bv49J0uMjTkm6xMI71wP2Toudau9+LFH05qbY7s2+S3GNdwf3t3eeF6
KY7okcrtLLIY8KgIFxbhmlr/q4BlLrGVUOsrqloJp9W82hBsY17MC7cQ1U51mD/W
SGQcWMuz+eJjEhlGN0FCsCYpiIUtslWDZ6p1Oo8CDwCX95rDwDsS8y6tdExMRnzH
tl9oadqE3NrkX7XMPa5nOUkAUys61+wJ57U0l8RhMjQP3qyox3fbiBnwt0HQN6Mb
fA+3DfLXk+GGwASHCtboHDhC+K47wuj3U/546yj4huXGvQbOBu9Rj1Nb09cYvjoZ
G4GENjd5h9wFo4pAdvT09+0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403336081906590965677371515206130227895390
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-13 11:27:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-11 11:27:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ihk-sh.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 797340117880226388411736621469670798097920926814632701478163302958028960623552680573145359718029391041323163677255255100077260323413248365115330403444032906511665723546269319381765133349653977294561522547677462220585446593383952036908771226996925486281566283552607871654905403846182164906846217263761743767632390869659780802189737472967416539550261865621311846100766203746740400881545732110952479046075272434766028413035198476615442267855966844809214269502575775792367436717636287660884688808875688099112293990524557413698158289107581075739699443357062002412394144409236597850126328091624721572448518487217424236078195178211095840097945700234039663270037855821793793237251470866803205338464516272542899125485583610707618380102731539034549079312159708523145165011915204172154091032763012311487183611632428817971594047265940509866413017195605595126700936932976508535230282132824325274596040968781903815064342820860401581772113416297421122358962402052404484227769149749379516341815206829841497619006497741828174779988605748616597844556879661556217148461746490777434426804128710634077208287151599037304710923653871558874350628243604960859509736454563241452630873726181336283238551685707709376568120030555680404412747793048037936139139053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b180e692a9d2cea3e2803b565305957fb7665215
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (534 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amtliches-verzeichnis.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essen.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essen.ihk24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitnord.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gera-ihk-wahl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handelskammer-bremen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihk-lueneburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihk-niederbayern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihk-niederrhein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihk-schleswig-holstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihk-sh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wuppertal.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amtliches-verzeichnis.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.essen.ihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gera-ihk-wahl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handelskammer-bremen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-lueneburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-niederbayern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-niederrhein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-schleswig-holstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihk-sh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sihk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wuppertal.ihk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018470f58bff0000040300473045022077033aa3db955c035541551d6b6dda79ffc7ed2fd608d3f9c6075ea9efaf8033022100a3ff7bbcba60afcc854b6ed8e55816d02df1a71c2d9a499ffdd7148416df30400075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000018470f58dfc0000040300463044022077e2b63f16114209b67df8819405b9cfc251a699722f7b0d4f5355d52ec4fa0802201a0a93e492939ed53487a8de990c4fc00667f42466c7f2e0155df8ecb8812287
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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