concerto-magazin.de

Issued by R3

About this certificate

This digital certificate with serial number 03:b0:1a:6d:e1:34:93:45:93:14:0b:94:2a:50:af:0a:ef:15 was issued on by Let's Encrypt.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=concerto-magazin.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:1a:6d:e1:34:93:45:93:14:0b:94:2a:50:af:0a:ef:15
Serial Number (int): 321261684829321501297583162502436818186005
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dc:1b:a1:3e:24:6e:bd:15:b6:44:ef:7b:fb:2f:fe:3e:b0:0a:94:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fc:b9:21:29:25:85:92:99:85:49:13:7e:ba:8f:64:97:5d:7d:59:f0
Fingerprint (sha256): ff:37:94:b2:ab:1b:dc:c9:cd:60:3e:07:3a:00:e9:35:32:9b:6e:4d:a3:d5:a2:f5:66:5e:17:7f:ca:4a:77:07

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate concerto-magazin.de

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for concerto-magazin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

altenburg-1180.de
altenburger-musikfestival.com
altenburger-musikfestival.de
backup.kamprad.isp-vhost04.domservice.de
barbarossa-festspiele.de
barbarossa-museum.de
barbarossamuseum.de
concerto-magazin.de
frech-ab.de
frechab.de
gewandhausmagazin.de
kamprad.isp-vhost04.domservice.de
orgelforum-sachsen.de
satt-statt-platt.de
sattstattplatt.de
www.altenburg-1180.de
www.altenburger-musikfestival.com
www.altenburger-musikfestival.de
www.barbarossa-festspiele.de
www.barbarossa-museum.de
www.barbarossamuseum.de
www.concerto-magazin.de
www.frech-ab.de
www.frechab.de
www.gewandhausmagazin.de
www.orgelforum-sachsen.de
www.satt-statt-platt.de
www.sattstattplatt.de

Other certificates including the domain name concerto-magazin.de

(limited to 100 certificates)
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
altenburg-1180.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
kamprad.isp-vhost04.domservice.de
concerto-magazin.de
concerto-magazin.de

Certificate

The complete raw certificate details for concerto-magazin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321261684829321501297583162502436818186005
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 05:43:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 05:43:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'concerto-magazin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 833647560242601601715105693690433536601183554860667708316428520986763811420809668573616456647052613028806030125261019026864332977888156130967671382926536617443228746162913332026849949235176808139514294231440249577708884281198413614851476103288705713223865625835809186467937289279721741617013368351624170953783888954489301649880992837666427861146329133273819395454440935850461873431864906236319683219857199388017391852778864517065940853277111655189770967604803791570539380850972160857470432048559802434332203470187945681670044868957296567856059574621329177060746820591091607646847475178716270121075614672788598445384816686349884344899658618903986481014778819815313610754575962557131909323749773581117520325612261863821718041601790969628996740747298170195687783708705695416575512957222242496038815635524501775031620977511504406167732263310663396381558443238560638336994477614074340716259569587613504897020582306969984843017911853429194724882199251094899866905684460108262641172007604539987829634974316356029821363798078077557472124778640906015558516239915985437072801867511134342406295039059953102959276485965128628160180309139454679477396232327221292889246113543265575531042057892927400173660006976279014515457270998299435767437396499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc1ba13e246ebd15b644ef7bfb2ffe3eb00a9455
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (693 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburg-1180.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburger-musikfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altenburger-musikfestival.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup.kamprad.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossa-festspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossa-museum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbarossamuseum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concerto-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frech-ab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frechab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gewandhausmagazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamprad.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgelforum-sachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satt-statt-platt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sattstattplatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburg-1180.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburger-musikfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altenburger-musikfestival.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossa-festspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossa-museum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarossamuseum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concerto-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frech-ab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frechab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gewandhausmagazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orgelforum-sachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satt-statt-platt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sattstattplatt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aac2e04830000040300463044022006cd7c0afc1deb5712d405d5ba488097ae0f5130a76ec04676a46db9ddcef6f30220423e6f850138412405a71d6396e20646ff2109f525fdad9bc605913a5c60b11d007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aac2e0485000004030047304502205400fc17f3dbdcc82f60e20327667956165564014d5b101d7c1e4fabf790aae1022100f61c22f7cdf9f08aa5f6fd6f1a60878c138e307902f707a05f948f2b1f0f54dc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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