gisservices.geog.uni-heidelberg.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6c:6e:a5:d1:c9:b7:d6:86:49:5f:cc:a3:11:63:42:71:55 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gisservices.geog.uni-heidelberg.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6c:6e:a5:d1:c9:b7:d6:86:49:5f:cc:a3:11:63:42:71:55
Serial Number (int): 298234429486265455916133860651789170405717
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c4:8a:14:51:b6:7a:68:f0:42:5c:fe:30:78:15:f6:ad:16:dd:3b:6b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4e:c7:8e:69:ff:f6:e0:dd:a8:e2:ff:49:64:20:c4:94:c5:bb:d0:16
Fingerprint (sha256): 01:36:2e:72:b1:57:1c:01:f5:fa:2b:2b:37:46:3e:a2:5d:28:90:69:9d:65:7b:2f:a6:1f:16:ce:7f:e3:b7:33

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gisservices.geog.uni-heidelberg.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gisservices.geog.uni-heidelberg.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gisservices.geog.uni-heidelberg.de

Other certificates including the domain name uni-heidelberg.de

(limited to 100 certificates)
hch19.cl.uni-heidelberg.de
www.mathematik.uni-heidelberg.de
klassphil.stura.uni-heidelberg.de
heimap-app.uni-heidelberg.de
heidocs1.zuv.uni-heidelberg.de
haw-pallas.adw.uni-heidelberg.de
flagship.kip.uni-heidelberg.de
cloud.kip.uni-heidelberg.de
ra.ziti.uni-heidelberg.de
neu.stura.uni-heidelberg.de
imap.iup.uni-heidelberg.de
calc.mathphys.stura.uni-heidelberg.de
vcg.iwr.uni-heidelberg.de
crispr.cos.uni-heidelberg.de
datashield.bioquant.uni-heidelberg.de
zinser-pc.physi.uni-heidelberg.de
weyauu.physi.uni-heidelberg.de
hcicloud.iwr.uni-heidelberg.de
cft2011.mathi.uni-heidelberg.de
public.urz.uni-heidelberg.de
virtualmin.urz.uni-heidelberg.de
karriere.klinikum.uni-heidelberg.de
www.soz.uni-heidelberg.de
www2.uniarchiv.uni-heidelberg.de
bud.iwr.uni-heidelberg.de
www.kip.uni-heidelberg.de
osm-vis.geog.uni-heidelberg.de
svn.ifi.uni-heidelberg.de
namse.med.uni-heidelberg.de
tc-hissva-prod1.zuv.uni-heidelberg.de
gisservices.geog.uni-heidelberg.de
mobility.zuv.uni-heidelberg.de
jupyter18.kip.uni-heidelberg.de
heiboxone.urz.uni-heidelberg.de
bq-mon-01.bioquant.uni-heidelberg.de
indico.physi.uni-heidelberg.de
neueslehramt.stura.uni-heidelberg.de
brassibase-dev.cos.uni-heidelberg.de
rewi-alumni.stura.uni-heidelberg.de
thbw-www.adw.uni-heidelberg.de
physikadmin.kip.uni-heidelberg.de
mp-force.ziti.uni-heidelberg.de
fsjapo.stura.uni-heidelberg.de
parcomp-git.iwr.uni-heidelberg.de
klimaschutzkarte.de
serv5.ub.uni-heidelberg.de
fachschaft.cl.uni-heidelberg.de
abhilekha.adw.uni-heidelberg.de
moodle.umm.uni-heidelberg.de
Sharepoint.urz.uni-heidelberg.de
kibana-dev.realm.bwinfosec.uni-heidelberg.de
brassibase-dev.cos.uni-heidelberg.de
exchange.uni-heidelberg.de
drw-www.adw.uni-heidelberg.de
cumulus.cos.uni-heidelberg.de
git.kip.uni-heidelberg.de
medusys.medma.uni-heidelberg.de
emp.kip.uni-heidelberg.de
relay2.uni-heidelberg.de
wrangler.mathi.uni-heidelberg.de
sturawahl.stura.uni-heidelberg.de
gistools.geog.uni-heidelberg.de
banane.mathi.uni-heidelberg.de
webapp-test.zuv.uni-heidelberg.de
mail.stw.uni-heidelberg.de
owncloud.itp.uni-heidelberg.de
ki.stura.uni-heidelberg.de
hisapp.uni-heidelberg.de
pille.iwr.uni-heidelberg.de
znfshop.zbt.uni-heidelberg.de
dschungelbuch.stura.uni-heidelberg.de
ui-test.heicloud.uni-heidelberg.de
aid.krz.uni-heidelberg.de
fszahnmedizin.stura.uni-heidelberg.de
dag.adw.uni-heidelberg.de
gitlab.gistools.geog.uni-heidelberg.de
survey.csi.uni-heidelberg.de
mtk-online.urz.uni-heidelberg.de
mats.stura.uni-heidelberg.de
hci-iweb.iwr.uni-heidelberg.de
ora3.zuv.uni-heidelberg.de
sso-02-dmed.urz.uni-heidelberg.de
beowulf.bioquant.uni-heidelberg.de
web.imbi.uni-heidelberg.de
aci.uni-heidelberg.de
jesajanet-pepa-test.med.uni-heidelberg.de
pix.umm.uni-heidelberg.de
wvz1.stura.uni-heidelberg.de
books.ub.uni-heidelberg.de
ext01.dmed.uni-heidelberg.de
serv5.ub.uni-heidelberg.de
cegit.ziti.uni-heidelberg.de
fsiued.stura.uni-heidelberg.de
dsf-dbmi.umm.uni-heidelberg.de
fs-sino.stura.uni-heidelberg.de
lists.cl.uni-heidelberg.de
bud.iwr.uni-heidelberg.de
dms.urz.uni-heidelberg.de
ipa.iwr.uni-heidelberg.de
rocket.uni-heidelberg.de

Certificate

The complete raw certificate details for gisservices.geog.uni-heidelberg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298234429486265455916133860651789170405717
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-18 01:02:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-16 01:02:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gisservices.geog.uni-heidelberg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 826555094173490746790900079233080946374288002088739246611613344740526150227582240511659820140396591713542517054317135022024208195463426668874797450289313416242209397756877542315066547847836061821740948477461213492204792646139325098827130694225072784277833901734084258200249372393962144794596840706207690554391482945640402572499298547782751018893847966090788800215856814177385980523994091784977244848315064581679876509186974295499985960388964854684999610502772900299685277871021780849509824595385662822348123606978047587827854694658723886632167427618958304031108664183675582042529710977531772932200763922731986381246934716104103023784670572067449570164948241920947523799035338667597186324649461703829006776974479549911015893205695291904821621008211825945137035719050618858422964001316452581398919744896131805791627205487401187569074443555040935082828924858663952758457389278225685260697120210080207737681726295559225722588049934162783024863930694392306776908137028344432217408051633517905625882389778360708014830180214504397539568833250311080820112635474647086471205348554718167603157924656882585488678111383311238888397369289755129494932510682744908276389300816852389199821776346592444776694335893076342399613007224290127656371367993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c48a1451b67a68f0425cfe307815f6ad16dd3b6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisservices.geog.uni-heidelberg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001698e8902aa00000403004630440220512f62f3f339bb53d16506639ca57ea844f3a3c9ed7b15748557bfc9f7942e4d022076e7014de658960822b62f1988ea945395a3fdefeb52c654dee2ade070f3d01f007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001698e89010e0000040300483046022100e2553ccba406992608d13c564b3fe44d8ea5568a72f28f0c85dd6d1214268b91022100b1b68f7fdc3a954e345920c7bb11c01b58fa3b8da7763b32fd683091a821b373
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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