eficst.ercim.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bf:28:ef:59:64:3e:23:fd:cc:99:89:76:b3:7f:58:b6:80 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eficst.ercim.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bf:28:ef:59:64:3e:23:fd:cc:99:89:76:b3:7f:58:b6:80
Serial Number (int): 326385201769037075478066250456571330475648
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ea:88:ba:35:7f:56:5f:6f:00:b8:4d:aa:75:70:5c:a3:01:9e:89:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 45:0d:ef:2b:fe:39:5d:44:ac:b8:b8:1d:28:72:ba:4e:dd:4f:0b:1b
Fingerprint (sha256): 00:65:8f:26:99:8a:9b:d5:70:96:b9:29:fb:93:37:02:d6:00:93:8b:44:49:cd:18:b4:93:b0:4c:b4:b6:5e:f6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate eficst.ercim.eu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eficst.ercim.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eficst.ercim.eu
eficst.eu
www.eficst.eu

Other certificates including the domain name ercim.eu

(limited to 100 certificates)
eficst.ercim.eu
bscw.ercim.eu
bscw.ercim.eu
webmail.sophia.ercim.eu
webmail.sophia.ercim.eu
ercim-news.ercim.eu
www.ercim.eu
wiki.ercim.eu
strews.ercim.eu
paasage.ercim.eu
ercim-news.ercim.eu
paasage.ercim.eu
strews.ercim.eu
fellowship.ercim.eu
www.ercim.eu
openmediaweb.ercim.eu
paasage.ercim.eu
wiki.ercim.eu
paasage.ercim.eu
trac.ercim.eu
webmail.sophia.ercim.eu
svn.ercim.eu
bscw.ercim.eu
trac.ercim.eu
webmail.sophia.ercim.eu
gitlab.ercim.eu
eficst.ercim.eu
strews.ercim.eu
ercim.eu
easyts-egi-old.ercim.eu
svn.ercim.eu
ercim-news.ercim.eu
svn.ercim.eu
lists.ercim.eu
eficst.ercim.eu
bscw.ercim.eu
ercim-news.ercim.eu
trac.ercim.eu
trac.ercim.eu
wiki.ercim.eu
fellowship.ercim.eu
easyts-egi-test.ercim.eu
webmail.sophia.ercim.eu
fellowship.ercim.eu
ercim-news.ercim.eu
fellowship.ercim.eu
bscw.ercim.eu
stats.ercim.eu
www.ercim.eu
bscw.ercim.eu
svn.ercim.eu
eficst.ercim.eu
lists.ercim.eu
bscw.ercim.eu
paasage.ercim.eu
wiki.ercim.eu
strews.ercim.eu
vre4eic.ercim.eu
stats.ercim.eu
stats.ercim.eu
easyts-test.ercim.eu
easyts-egi-old.ercim.eu
trac.ercim.eu
bscw.ercim.eu
www.ercim.eu
ercim.eu
stats.ercim.eu
lists.ercim.eu
wiki.ercim.eu
trac.ercim.eu
svn.ercim.eu
trac.ercim.eu
paasage.ercim.eu
strews.ercim.eu
fellowship.ercim.eu
lists.ercim.eu
paasage.ercim.eu
fellowship.ercim.eu
paasage.ercim.eu
strews.ercim.eu
svn.ercim.eu
lists.ercim.eu
www.ercim.eu
ercim-news.ercim.eu
eficst.ercim.eu
strews.ercim.eu
strews.ercim.eu
ercim.eu
lists.ercim.eu
webmail.sophia.ercim.eu
*.ercim.eu
lists.ercim.eu
wiki.ercim.eu
easyts-egi.ercim.eu
lists.ercim.eu
wiki.ercim.eu
stats.ercim.eu
trac.ercim.eu
www.ercim.eu
fellowship.ercim.eu

Certificate

The complete raw certificate details for eficst.ercim.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326385201769037075478066250456571330475648
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-25 11:13:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-23 11:13:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eficst.ercim.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 647453044037938815992269430269547916117856360452555473552457657123662555633833235511862998424313352550222892690517842101034502336996536771704591196985847737498413851398301500824753053850762478313820753063208197941830244616260124376141651360705870967767228903636982843609118915858759601276666305702010813145987391630149387612977791123762207670670977425983758723942708457853429560646444361742695348461865680359302670141780789984996054134112233349783222812229400426322651054720987838784305236223011673386165718015435869819532792660217123187974411623009580357673976130133084448837584502027486812995275135940484198888293321787586346395228940312045416865349099371704306938459544360109212358235642009103853724938219401755298770359889226001443875264352163048709035097215443590580390805105609534975104079835758756214091861311544672546030109964022870668940733484853975453286156092245562728673425407956604930636535396915532770742604295190351004782447767476068209089334890808569432539579067569927825867604842294309758377573481531503243876927204702579901801080239207082820418243387834733806816346872340873578748780506989663390382546788608601836379421211708895951184656136887619632746709307357488628941919905454561390707917088246182399801285125213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea88ba357f565f6f00b84daa75705ca3019e89e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eficst.ercim.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eficst.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eficst.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001674ac9b332000004030046304402201ce1ae934e249be60440aec5ca72631401c369f8c7ebd37171aa6e2fa4760b9c02200e71fc65d9707927c6997dc13892905c63b54f7c2ae85711adac0e04863cff5e00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001674ac9b3500000040300473045022100d28cc3062d944f37a318041a93e75611f4e73fe8e00e79e51a4c18ebd70bdcf302200fff92c24eada9f8d9dabaf4e56954a803c8f6eea7f77d5e3aff8aa0d4d3be40
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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