sap-cert.uni-koeln.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b6:dc:ed:46:86:af:4b:27:1b:45:94:92:ea:51:f1:cc:62 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sap-cert.uni-koeln.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b6:dc:ed:46:86:af:4b:27:1b:45:94:92:ea:51:f1:cc:62
Serial Number (int): 323561910738759191299751602454855507102818
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f5:b3:8c:51:42:76:06:82:18:c1:03:36:06:80:e4:8e:c7:e3:91:b7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7f:d6:95:5b:3d:ea:71:40:c6:0c:22:f5:77:74:1e:95:51:8e:3a:ab
Fingerprint (sha256): 00:6f:a5:18:e2:c7:8f:48:d1:01:8c:ad:7c:16:91:c7:b2:16:79:a4:1a:2a:8a:bd:45:53:82:50:9e:b4:47:64

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sap-cert.uni-koeln.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sap-cert.uni-koeln.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sap-cert.uni-koeln.de

Other certificates including the domain name uni-koeln.de

(limited to 100 certificates)
phil-fak.uni-koeln.de
geographie.uni-koeln.de
crc806dbstatic.uni-koeln.de
arachne.uni-koeln.de
kriminologie.uni-koeln.de
familienvermoegensplanung.jura.uni-koeln.de
dgp2018.uni-koeln.de
covid-gams.uni-koeln.de
gero.uni-koeln.de
fsmed-koeln.de
sonnenbus.uni-koeln.de
sfb806srv.uni-koeln.de
wiso-evaluation.uni-koeln.de
digital.uni-koeln.de
fachschaftneurowissenschaften.uni-koeln.de
mrs.uni-koeln.de
sap-cert.uni-koeln.de
wiso.uni-koeln.de
escon2018.uni-koeln.de
cewis.uni-koeln.de
cler.uni-koeln.de
webmail.uni-koeln.de
beh-workshop.uni-koeln.de
usac.uni-koeln.de
career-hf.uni-koeln.de
biologiedidaktik.uni-koeln.de
besatzungskinder.uni-koeln.de
pj.uni-koeln.de
ccls.phil-fak.uni-koeln.de
physiologie.uni-koeln.de
amaes.uni-koeln.de
klein.uni-koeln.de
www.lab.uni-koeln.de
afrikanistik.phil-fak.uni-koeln.de
et-cc.uni-koeln.de
philosophie.uni-koeln.de
translational-genomics.uni-koeln.de
apcmbp.uni-koeln.de
recall-ttt.uni-koeln.de
geographie.uni-koeln.de
idptest.rrz.uni-koeln.de
sutter.wiso.uni-koeln.de
itn-codeage.uni-koeln.de
soccco.uni-koeln.de
career.phil-fak.uni-koeln.de
usac.uni-koeln.de
fgsp2019.uni-koeln.de
ac1.uni-koeln.de
qm.phil-fak.uni-koeln.de
progserver.informatik.uni-koeln.de
dfr.jura.uni-koeln.de
tem.uni-koeln.de
euwir.jura.uni-koeln.de
fstafrika.phil-fak.uni-koeln.de
dch.phil-fak.uni-koeln.de
chemiedidaktik.uni-koeln.de
polymere.uni-koeln.de
isp2017.rrz.uni-koeln.de
bpl.uni-koeln.de
fg1.phil-fak.uni-koeln.de
auslaenderreferat.uni-koeln.de
staff.uni-koeln.de
sfb806srv.uni-koeln.de
wirtschaftsarchiv.uni-koeln.de
www.cecad.uni-koeln.de
computationalbiology.uni-koeln.de
wisotest17.uni-koeln.de
zhd.uni-koeln.de
sprachfoerderprojekt.phil-fak.uni-koeln.de
lac.uni-koeln.de
digitales.histinst.uni-koeln.de
weiterdenken-si.uni-koeln.de
str2.rrz.uni-koeln.de
cgs.uni-koeln.de
sum.phil-fak.uni-koeln.de
wissrecht.uni-koeln.de
treuhand.uni-koeln.de
sprachlabor.phil-fak.uni-koeln.de
mongoltales.cceh.uni-koeln.de
uklan.rrz.uni-koeln.de
vwibo.verw.uni-koeln.de
chailab.uni-koeln.de
behavioraloperations2014.uni-koeln.de
imsb.uni-koeln.de
computationalbiology.uni-koeln.de
steuerrecht.uni-koeln.de
elearning.uni-koeln.de
www.zvfk.uni-koeln.de
versicherung.uni-koeln.de
lawsoccercup.jura.uni-koeln.de
wigeo.uni-koeln.de
www.kksn-elearning.uni-koeln.de
idm2ccm.rrz.uni-koeln.de
fa-mnf.uni-koeln.de
indecon.uni-koeln.de
zib.phil-fak.uni-koeln.de
schmalz.uni-koeln.de
hsg-sowi.uni-koeln.de
trust.uni-koeln.de
wirtschaftsarchiv.uni-koeln.de

Certificate

The complete raw certificate details for sap-cert.uni-koeln.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323561910738759191299751602454855507102818
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-13 19:30:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 19:30:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sap-cert.uni-koeln.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 806384223996078013391499420592079314898986425599823045317381100670661585604771334672775438582954382464602476400232085655253985133583850928237997032530212057073072247190958896846295335969016179296441732135368970447435434906053042772469096658121582293599537834723114475215626408340367941466260647376874610893672091992785708723320528984223275468498257279566036590885316180581593140369397498375228255948007092264802770648128205115307383282594977539714186762621550153002950430890969679748403208837019590383999035566792852234105285310408585719141929379589826318536460437123709417734398658963213609540205993838858492724458188056111964332360037726181963014895111605807587435913629971014489291503704230370373458732962529092682666520933539184689598428393883156121307064409014210244163426621704922333838798189781242738755706918599644840025596374308720430654039242841209490205774562109628123245161142019481628708910525761661437598283262866470972373653883544462230125721647785996517922415598427584936064767043222462131333816399148595691008819030297079223628418853677295030247592447810554697899224023737095413057475394498011975476871328395813621884366221594010328700423428766127834817191393065568957508791343952861934914787801514207558113750819679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5b38c514276068218c103360680e48ec7e391b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sap-cert.uni-koeln.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bed074ee800000403004630440220617bebc7db2ff57d09a59519900b00d0e86112ed8fa47010a8b55d8a73a44a4402206677d43a52cd8929a9ac695931eb13418849ad18252bf60b62be8bea72b0738e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bed074ed600000403004730450221009a38cc351985e8c292be811d0de93a41b8fe27d3cf516ac7f0b7b82650ed82b302202c8eb605a9095d64a6fb5b21bb498dabad8a35ce04b587605af923300a21ce15
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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