fg1.phil-fak.uni-koeln.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e4:1e:11:7d:70:0c:5f:26:c7:76:61:e9:06:be:4b:91:18 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fg1.phil-fak.uni-koeln.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e4:1e:11:7d:70:0c:5f:26:c7:76:61:e9:06:be:4b:91:18
Serial Number (int): 338961205106353435687034395341865880359192
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8f:ae:9c:29:96:5f:d2:f0:ae:f0:95:8e:78:e9:a4:d0:15:a9:44:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): da:1f:9f:14:3b:22:45:13:50:51:f5:ae:46:05:f2:d7:59:cd:d3:09
Fingerprint (sha256): 01:9d:7a:ec:b6:22:cb:91:ce:c0:fd:d9:56:50:b8:38:77:b7:90:b1:90:99:ba:0d:a0:bd:49:5e:24:7e:5a:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fg1.phil-fak.uni-koeln.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fg1.phil-fak.uni-koeln.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fg1.phil-fak.uni-koeln.de
www.fg1.phil-fak.uni-koeln.de

Other certificates including the domain name uni-koeln.de

(limited to 100 certificates)
phil-fak.uni-koeln.de
geographie.uni-koeln.de
crc806dbstatic.uni-koeln.de
arachne.uni-koeln.de
kriminologie.uni-koeln.de
familienvermoegensplanung.jura.uni-koeln.de
dgp2018.uni-koeln.de
covid-gams.uni-koeln.de
gero.uni-koeln.de
fsmed-koeln.de
sonnenbus.uni-koeln.de
sfb806srv.uni-koeln.de
wiso-evaluation.uni-koeln.de
digital.uni-koeln.de
fachschaftneurowissenschaften.uni-koeln.de
mrs.uni-koeln.de
sap-cert.uni-koeln.de
wiso.uni-koeln.de
escon2018.uni-koeln.de
cewis.uni-koeln.de
cler.uni-koeln.de
webmail.uni-koeln.de
beh-workshop.uni-koeln.de
usac.uni-koeln.de
career-hf.uni-koeln.de
biologiedidaktik.uni-koeln.de
besatzungskinder.uni-koeln.de
pj.uni-koeln.de
ccls.phil-fak.uni-koeln.de
physiologie.uni-koeln.de
amaes.uni-koeln.de
klein.uni-koeln.de
www.lab.uni-koeln.de
afrikanistik.phil-fak.uni-koeln.de
et-cc.uni-koeln.de
philosophie.uni-koeln.de
translational-genomics.uni-koeln.de
apcmbp.uni-koeln.de
recall-ttt.uni-koeln.de
geographie.uni-koeln.de
idptest.rrz.uni-koeln.de
sutter.wiso.uni-koeln.de
itn-codeage.uni-koeln.de
soccco.uni-koeln.de
career.phil-fak.uni-koeln.de
usac.uni-koeln.de
fgsp2019.uni-koeln.de
ac1.uni-koeln.de
qm.phil-fak.uni-koeln.de
progserver.informatik.uni-koeln.de
dfr.jura.uni-koeln.de
tem.uni-koeln.de
euwir.jura.uni-koeln.de
fstafrika.phil-fak.uni-koeln.de
dch.phil-fak.uni-koeln.de
chemiedidaktik.uni-koeln.de
polymere.uni-koeln.de
isp2017.rrz.uni-koeln.de
bpl.uni-koeln.de
fg1.phil-fak.uni-koeln.de
auslaenderreferat.uni-koeln.de
staff.uni-koeln.de
sfb806srv.uni-koeln.de
wirtschaftsarchiv.uni-koeln.de
www.cecad.uni-koeln.de
computationalbiology.uni-koeln.de
wisotest17.uni-koeln.de
zhd.uni-koeln.de
sprachfoerderprojekt.phil-fak.uni-koeln.de
lac.uni-koeln.de
digitales.histinst.uni-koeln.de
weiterdenken-si.uni-koeln.de
str2.rrz.uni-koeln.de
cgs.uni-koeln.de
sum.phil-fak.uni-koeln.de
wissrecht.uni-koeln.de
treuhand.uni-koeln.de
sprachlabor.phil-fak.uni-koeln.de
mongoltales.cceh.uni-koeln.de
uklan.rrz.uni-koeln.de
vwibo.verw.uni-koeln.de
chailab.uni-koeln.de
behavioraloperations2014.uni-koeln.de
imsb.uni-koeln.de
computationalbiology.uni-koeln.de
steuerrecht.uni-koeln.de
elearning.uni-koeln.de
www.zvfk.uni-koeln.de
versicherung.uni-koeln.de
lawsoccercup.jura.uni-koeln.de
wigeo.uni-koeln.de
www.kksn-elearning.uni-koeln.de
idm2ccm.rrz.uni-koeln.de
fa-mnf.uni-koeln.de
indecon.uni-koeln.de
zib.phil-fak.uni-koeln.de
schmalz.uni-koeln.de
hsg-sowi.uni-koeln.de
trust.uni-koeln.de
wirtschaftsarchiv.uni-koeln.de

Certificate

The complete raw certificate details for fg1.phil-fak.uni-koeln.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338961205106353435687034395341865880359192
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-22 12:32:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-20 12:32:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fg1.phil-fak.uni-koeln.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 732949198501774566912018284343392173234444379351213042099941551903301039700053898591050206748171405107291363554013168396732918744743356365980754497106367865179311189302114547319222208019794971301309642495287171057642721377918677233411785631987105047953444008373570089785195199028285832299786819658752009948921103972344861741714674512265048130394902027638329696527549940737791448061478751071572220420723261069806749202178460839402676989056405062594100351971670004674885022609735287728416808550029706780011831348440009231498409565373006550004198962062942940698609056457164443290185975686806638532407112145059999675431663146711924949501485087424854004536158660456416905652467329238769673867742225413385688391214824456834457528724588530824434906718693560212049023894626266712408473517448590569757036431977491705409534868581813669540500987287446300920357389223024007922020980744305454974025228240523469686887579713145444005923801980221352655456410507379069103628693242323980321671746334974954954474128876420068510997473235910716892497781554106992091736664345314780563568593855516084388670611838677616460305953945802044950744727378012942486251600266501567170604419541728218592802096190177228350077769217580171150363709862489353716895133877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8fae9c29965fd2f0aef0958e78e9a4d015a94438
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fg1.phil-fak.uni-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fg1.phil-fak.uni-koeln.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001673b9f45030000040300483046022100a537db8b0909717481ad9f709a8247404cc9cece94c8b719a5cde89e1f82863a022100e789eafec82cf8e3704e319988a5a9fa065a6a228c761f723fa4c73c63a5718600760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001673b9f457800000403004730450221008f746c1052abdf7801dcf00b9bcde06744c34c7ccd17cb238854280fc94c6a120220512f4de65aa8aa4fd34198ca451df7ee7d266c3c4281938a15b086893464e4af
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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