chat.ucc.ovgu.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:10:46:ca:4b:91:8a:3a:73:cd:9d:da:b2:c6:cd:b2:ba:d9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chat.ucc.ovgu.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:10:46:ca:4b:91:8a:3a:73:cd:9d:da:b2:c6:cd:b2:ba:d9
Serial Number (int): 266875472002397706935931518561563735931609
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 13:4f:2c:02:24:cc:43:65:e0:75:25:dd:6a:c9:fe:53:11:d1:79:53
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 24:00:ae:05:af:33:29:76:38:b2:9a:91:70:9b:78:e0:66:69:9e:ad
Fingerprint (sha256): 01:ec:0a:7e:0d:5d:19:06:79:b5:90:5b:ea:1d:0e:ce:55:91:8c:88:6f:03:7d:b9:a4:a8:1e:c0:b9:b1:85:87

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chat.ucc.ovgu.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chat.ucc.ovgu.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chat.ucc.ovgu.de

Other certificates including the domain name ovgu.de

(limited to 100 certificates)
polarion.stimulate.ovgu.de
diz-ummd-ag.med.ovgu.de
www.danss.ovgu.de
www.cs.ovgu.de
fmbcloud.ovgu.de
stipendium.ovgu.de
www27.ovgu.de
www30.ovgu.de
atlas.ub.ovgu.de
chat.ucc.ovgu.de
moodle-n.ovgu.de
tcms.iks.cs.ovgu.de
evasysweb.imed.uni-magdeburg.de
www24.ovgu.de
spoz.ovgu.de
vconk.ovgu.de
me.stimulate.ovgu.de
a01z.ucc.ovgu.de
a01z.ucc.ovgu.de
vdi-ub.ovgu.de
cloud.ucc.ovgu.de
pages.vc.cs.uni-magdeburg.de
www.apl.ovgu.de
spweb2.med.ovgu.de
www21.ovgu.de
dsms.ovgu.de
vpn10.ucc.ovgu.de
vconub.ovgu.de
m01z.ucc.ovgu.de
moodle.med.ovgu.de
aris.ucc.ovgu.de
docshare-extern.med.ovgu.de
blog.ai.ovgu.de
ontohub.org
cseweb.ivs.cs.ovgu.de
cloud.medienbildung.ovgu.de
a01z.ucc.ovgu.de
facade.med.uni-magdeburg.de
a01z.ucc.ovgu.de
smvpn.iks.cs.ovgu.de
www23.ovgu.de
serrala.med.ovgu.de
w5rs.ovgu.de
ivs-pm.ovgu.de
aris.ucc.ovgu.de
edu.cs.ovgu.de
h01-d00.ucc.ovgu.de
www.euroskills.ovgu.de
wlanauth.ovgu.de
myovgu.ovgu.de
h01-d04.ucc.ovgu.de
finca.cs.ovgu.de
fmbcloud.ovgu.de
bama-fmb.ovgu.de
owncl2.iti.cs.ovgu.de
myfmb.ovgu.de
www31.ovgu.de
wikis.ovgu.de
analytics.ucc.ovgu.de
m01z.ucc.ovgu.de
www.med.uni-magdeburg.de
www15.ovgu.de
webgtds.med.ovgu.de
laraga.ilm.ovgu.de
www.meb.ovgu.de
www.myfmb.ovgu.de
www.ci.ovgu.de
medusa.ovgu.de
pruefer.ovgu.de
vpn.ovgu.de
www.ub.ovgu.de
fmbcloud.ovgu.de
aris.ucc.ovgu.de
cse.cs.ovgu.de
open.ess-project.ovgu.de
ontohub.org
transit.urz.uni-magdeburg.de
webmail.uni-magdeburg.de
prozess-portal.ovgu.de
mediaweb.med.uni-magdeburg.de
mx1.ovgu.de
git.iti.cs.ovgu.de
www.danss.ovgu.de
www30.ovgu.de
vconw.ovgu.de
gitlab.stimulate.ovgu.de
openenergy-platform.org
ph1web01.verw.uni-magdeburg.de
ismir-explorer.ai.ovgu.de
lpm.medienbildung.ovgu.de
bmsg.ovgu.de
nc.ovgu.de
blog.ai.ovgu.de
myfmb.ovgu.de
fww-alumni.ovgu.de
project.stimulate.ovgu.de
redcap-extern.med.uni-magdeburg.de
vpn.ovgu.de
b01z.ucc.ovgu.de
csnvpn.ucc.ovgu.de

Certificate

The complete raw certificate details for chat.ucc.ovgu.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266875472002397706935931518561563735931609
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-21 20:19:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-19 20:19:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chat.ucc.ovgu.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 881817874626486422790535059981390545967750110126465179625475005564003349724238880091512468983783299702836755880052609050959786343847884444226918621983559392316157108189808564925779312224512417521569100478770440243223380620939276842343816390277668861658325505795854303138114722842050779435594761134622914895488276562439272677620057708617723665187535446417982748039982541307048258302486223576953301260328916937250432480335329279597688476849385315672903645735240466905532057493126770989844409290991390099736826803312794362601776002027487722235519491909968354135202529277605879889497595408447292658872091173267331341328916646722890115956638346196112819206866257518108435316182084859474643868909690205678001688751035223746393935962182861254538327784254978438567729055035937074306106119282628113493312302155985218234357453876552674994678296411149088829745165227277049578875548517894471494508152608790910838863043853740824140440191599154101527466081225360653447464572468230618909298707890542645784478748653133301175950017487025826123653862110821313269978183481232978927595826818684259406889641183490926795800091504395348844525395322812295445524688567569856730305037225602490608167309718455646871914290307943217758114624362826347823146461671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							134f2c0224cc4365e07525dd6ac9fe5311d17953
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.ucc.ovgu.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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