qualitative-content-analysis.aau.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:38:4e:dd:33:39:6f:ba:d4:93:99:f0:5e:48:21:86:a2:53 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=qualitative-content-analysis.aau.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:38:4e:dd:33:39:6f:ba:d4:93:99:f0:5e:48:21:86:a2:53
Serial Number (int): 280497498663083727278518413418710593610323
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 40:e7:eb:49:1e:23:52:48:49:3c:61:50:47:af:1b:7b:44:49:a9:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 19:9e:76:82:c7:5f:52:98:5d:de:0c:61:95:71:cd:ef:0a:d7:9f:a1
Fingerprint (sha256): 01:a6:2c:33:96:75:9a:3b:e4:94:79:83:e5:0b:08:50:02:ad:5d:bc:65:fc:70:d5:8e:92:ab:e3:f9:b8:64:fd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate qualitative-content-analysis.aau.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qualitative-content-analysis.aau.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qualitative-content-analysis.aau.at
www.qualitative-content-analysis.aau.at

Other certificates including the domain name aau.at

(limited to 100 certificates)
studdorf.aau.at
clouare.aau.at
shib.aau.at
campus-gis.aau.at
scs-iwas.aau.at
qualitative-content-analysis.aau.at
elearning.aau.at
lab-iid.aau.at
dx-workshop.org
seafile.aau.at
survey-test.aau.at
web-ainf.aau.at
dx-workshop.org
survey.aau.at
ae-ainf.aau.at
seafile.aau.at
pervasive.aau.at
www.stat.aau.at
swilt.aau.at
jobs.aau.at
www.itec.aau.at
ub.aau.at
mobile.aau.at
scs-iwas.aau.at
kiss.aau.at
uniclub.aau.at
lab-iid.aau.at
elearning.aau.at
uniclub.aau.at
narrativeencounters.aau.at
rooms.nes.aau.at
lids.aau.at
doku-inf.aau.at
narrativeencounters.aau.at
ameise.aau.at
icn.itec.aau.at
moodle.aau.at
campusplan.aau.at
newsletter.uniclub.aau.at
scs-iwas.aau.at
bscw.aau.at
wiki.nes.aau.at
dia-2018.aau.at
pfl.aau.at
trusteye.nes.aau.at
informatikwerkstatt.aau.at
vulnscan.zid.aau.at
mailbox.itec.aau.at
pfl.aau.at
tomwinkler.nes.aau.at
svn-itec.aau.at
data.aau.at
ius2.aau.at
sepse-iid.aau.at
www-app1.aau.at
www.aau.at
tech.nes.aau.at
moodle-standby.aau.at
kcgl.aau.at
kindergruppe.aau.at
crowdmeteodata.aau.at
data.aau.at
video.aau.at
apollon.aau.at
aau.at
kiss.aau.at
darwin-isys.aau.at
ius.aau.at
indy.nes.aau.at
codex-management.aau.at
litkult1920er.aau.at
trusteye.nes.aau.at
wiki-ainf.aau.at
mmsys2016.itec.aau.at
ahesn.aau.at
informatik-spl.aau.at
me-sci.aau.at
crosmos.nes.aau.at
dia-2018.aau.at
saner.aau.at
uniclub.aau.at
spiderino.nes.aau.at
doku-inf.aau.at
ide.aau.at
tewiki.uni-klu.ac.at
mc40.aau.at
usionline.aau.at
ius.aau.at
survey.aau.at
mooshak.nes.aau.at
www-php1.aau.at
blog.tewi.aau.at
sauron.aau.at
tomwinkler.nes.aau.at
www.edu.aau.at
aesn-api.aau.at
bbb.aau.at
crosmos.nes.aau.at
www.aau.at
vcs-isbi.aau.at

Certificate

The complete raw certificate details for qualitative-content-analysis.aau.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280497498663083727278518413418710593610323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 20:12:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 20:12:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qualitative-content-analysis.aau.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 785279624707849747425366062539688849708119854391506128141046586450857316285197622833807280594417207144535931626507835316575291996888469382640201250287813386582235893111807727435964252448538712298233967790308467833102916488536425473229236692635415963670947082136815237984659746490090565132353508311469711479969100741615619534809299570873512462115360737252626786126066030334526125510519435796721656134830441174683573771755524390361794218466413916406674538968349316845544211687084524008866673518549814419767704581751939640093397305818972517858426067606475039805314091293975053899924036625089278907741023587529673937072788559578459093615273952069724722315356995512411401728485254379995599617752938334071318487240719606007570777639668254138049308020041521836074849832087510840249355761314922780058928449790857049375835907386256698235466796341803992328943896370581969015184171428156446449772007018548650858047325795597401512154787962782556346082890064591894184830949090364511127439801065550214568182846040878015309388032860219302469031948270199781171769656667091939800879745997352301235934218608198805953833208388618781492567123920331376032925669246208195749345148015356691103412157466409479121231259702115014702312587100579706628416337883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40e7eb491e235248493c615047af1b7b4449a9f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualitative-content-analysis.aau.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualitative-content-analysis.aau.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001700ce5811a000004030046304402203827725902c4ec208039d9119628b9d7d0886ea3b4d89d3cbab0d3ed76b66e50022006693aba326610c86cdd088b9a4e7c30414123b8222124bef645194fbc4b46380075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001700ce581b600000403004630440220563bf607f6e05a01415ceff9f2412e5453e97c2ad68598c35e935441b75466960220514e3b52b996cc2d9220bfeba7d06b88ddf41e2d4b9727895138e1a9aa4e2b49
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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