sprachlabor.phil-fak.uni-koeln.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c5:db:6b:a4:c0:50:bd:d0:b0:dc:3c:76:f4:99:84:76:45 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sprachlabor.phil-fak.uni-koeln.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c5:db:6b:a4:c0:50:bd:d0:b0:dc:3c:76:f4:99:84:76:45
Serial Number (int): 328664143927098347519771724880525549401669
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 68:a7:28:b6:fe:59:49:c6:8b:35:06:6f:e8:94:ec:42:ae:2c:f2:a9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dc:dc:38:b0:b0:e4:1f:50:b8:bb:fe:87:fb:0e:27:b1:63:f4:41:4d
Fingerprint (sha256): 02:25:59:35:21:dd:fc:d7:41:81:c4:51:45:ec:6c:4c:34:2b:8b:3e:c6:4d:c7:a0:6d:de:f1:d1:54:ff:a6:c1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sprachlabor.phil-fak.uni-koeln.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sprachlabor.phil-fak.uni-koeln.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sprachlabor.phil-fak.uni-koeln.de
www.sprachlabor.phil-fak.uni-koeln.de

Other certificates including the domain name uni-koeln.de

(limited to 100 certificates)
phil-fak.uni-koeln.de
geographie.uni-koeln.de
crc806dbstatic.uni-koeln.de
arachne.uni-koeln.de
kriminologie.uni-koeln.de
familienvermoegensplanung.jura.uni-koeln.de
dgp2018.uni-koeln.de
covid-gams.uni-koeln.de
gero.uni-koeln.de
fsmed-koeln.de
sonnenbus.uni-koeln.de
sfb806srv.uni-koeln.de
wiso-evaluation.uni-koeln.de
digital.uni-koeln.de
fachschaftneurowissenschaften.uni-koeln.de
mrs.uni-koeln.de
sap-cert.uni-koeln.de
wiso.uni-koeln.de
escon2018.uni-koeln.de
cewis.uni-koeln.de
cler.uni-koeln.de
webmail.uni-koeln.de
beh-workshop.uni-koeln.de
usac.uni-koeln.de
career-hf.uni-koeln.de
biologiedidaktik.uni-koeln.de
besatzungskinder.uni-koeln.de
pj.uni-koeln.de
ccls.phil-fak.uni-koeln.de
physiologie.uni-koeln.de
amaes.uni-koeln.de
klein.uni-koeln.de
www.lab.uni-koeln.de
afrikanistik.phil-fak.uni-koeln.de
et-cc.uni-koeln.de
philosophie.uni-koeln.de
translational-genomics.uni-koeln.de
apcmbp.uni-koeln.de
recall-ttt.uni-koeln.de
geographie.uni-koeln.de
idptest.rrz.uni-koeln.de
sutter.wiso.uni-koeln.de
itn-codeage.uni-koeln.de
soccco.uni-koeln.de
career.phil-fak.uni-koeln.de
usac.uni-koeln.de
fgsp2019.uni-koeln.de
ac1.uni-koeln.de
qm.phil-fak.uni-koeln.de
progserver.informatik.uni-koeln.de
dfr.jura.uni-koeln.de
tem.uni-koeln.de
euwir.jura.uni-koeln.de
fstafrika.phil-fak.uni-koeln.de
dch.phil-fak.uni-koeln.de
chemiedidaktik.uni-koeln.de
polymere.uni-koeln.de
isp2017.rrz.uni-koeln.de
bpl.uni-koeln.de
fg1.phil-fak.uni-koeln.de
auslaenderreferat.uni-koeln.de
staff.uni-koeln.de
sfb806srv.uni-koeln.de
wirtschaftsarchiv.uni-koeln.de
www.cecad.uni-koeln.de
computationalbiology.uni-koeln.de
wisotest17.uni-koeln.de
zhd.uni-koeln.de
sprachfoerderprojekt.phil-fak.uni-koeln.de
lac.uni-koeln.de
digitales.histinst.uni-koeln.de
weiterdenken-si.uni-koeln.de
str2.rrz.uni-koeln.de
cgs.uni-koeln.de
sum.phil-fak.uni-koeln.de
wissrecht.uni-koeln.de
treuhand.uni-koeln.de
sprachlabor.phil-fak.uni-koeln.de
mongoltales.cceh.uni-koeln.de
uklan.rrz.uni-koeln.de
vwibo.verw.uni-koeln.de
chailab.uni-koeln.de
behavioraloperations2014.uni-koeln.de
imsb.uni-koeln.de
computationalbiology.uni-koeln.de
steuerrecht.uni-koeln.de
elearning.uni-koeln.de
www.zvfk.uni-koeln.de
versicherung.uni-koeln.de
lawsoccercup.jura.uni-koeln.de
wigeo.uni-koeln.de
www.kksn-elearning.uni-koeln.de
idm2ccm.rrz.uni-koeln.de
fa-mnf.uni-koeln.de
indecon.uni-koeln.de
zib.phil-fak.uni-koeln.de
schmalz.uni-koeln.de
hsg-sowi.uni-koeln.de
trust.uni-koeln.de
wirtschaftsarchiv.uni-koeln.de

Certificate

The complete raw certificate details for sprachlabor.phil-fak.uni-koeln.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4wUBKGGXp5YMYwTe6wxo
3ObtbsiowDK/15GUH022COOIebxa0CPuO7QnC0U6z8DASisEZGgXeN6DueYkzbpf
oYc5jJMd/diyqkSUgAL7BB8jngqvGm39lg+ZaWC26xVxHJFU/JmfmU4o1hf9l+ef
p3OhxhK2MK8ldicvYLExePsohQ5ZSNJ/PoWPUtX0TXrF0lS5ttDgZNwJVWAIkaMy
wEZzqAozh/k0xNOe37B5WjaQcIgmpV4sIGh5cckGYCJDiGoVPKY8rMjxYQhwL/03
Sp/KPc7WR2OA5c4PZix/d8oYNWRZU1wb+fh6Tgl9Kbvb/IEIs4z/utQueXClFje7
FcX/0sRFpo2NAr9S0di3sskW8Xq/KutMVxAq8ZQl8rr1q5PV9cUkscyYk8U5EMY/
+eP3V7eGxD+yTd89fJwqA8bIt0chEUtyFlneS6fe8C4F0THg7m3D2zszUKfqZtM1
6tyzsctduiVMyHumSRCqZPxkSCwqGNVNeuP2/tfXRZJpIWownMVqzPA5u+WRnkuh
5f5zwioG78Go4ucFLmtfkS2mkJ81Cmac09fAgc6fUvcp1SRTC5HTIYGpq6l13pLT
wU0+FCmuyQr1TcefPKyriNN5zsf+Mhm6M5TIOxqTuUag0KJcttUOzDPEqcWk/tYq
lwx4BFd00LObVtDd81Z46pkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328664143927098347519771724880525549401669
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 19:59:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 19:59:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sprachlabor.phil-fak.uni-koeln.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 926158956058529764307737688222132377583655068145785201019949552012956685704929096557279152744829886907275284835069717011297289880441684593960209140464107843989676336393378355541401403479666050716882139620533911797979685343552983963298198217328360077306502010398192627433910662646009679219728765460019862570870367805143429858888676630905754911618355969689859242527949746002477119378073902815952040122430266203037447976336156493957326637642632596716282553727428253518225689525249035393262967473679675856492813015573262585656327636766113981391855814176286129733745412046207099888399271471947128758342834424515966968341397451807459695631719339413655020962703172791559634308486448289826608671079810471186211673076643271100828160424308262338624013480927730988656932861231268371465451400190249376628567211993004190813271968554260964623816502853662248998828845305468068246174255142756326193244316854617234604161402757669309411925376552023044518923934042467175027696730735132219515810741378644045683560296407691773273144721299166521353286438706478022577163533085640513711232237106991836088755306186747152653378674464008605769762359136168391160836795576778158838446606646613349828695069587159684975231806761814231252939436247977360627598944921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68a728b6fe5949c68b35066fe894ec42ae2cf2a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprachlabor.phil-fak.uni-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sprachlabor.phil-fak.uni-koeln.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d4b52912300000403004630440220556801bbeb638b4712d17c2092ee9bb126ead113831ad056c7097c223aac3bad0220651844cafc4e8773ee306d6cd5451d26fa248563d79715e4c7ef66e3309ff093007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d4b5291250000040300473045022100bcc7b8f904199519110d12c672881c2ed82a149c379d7e8ffa7b5f1430bbfc4e022040f123a5b410d02c512aba393f6f72d70834030a9653cc2ec023099251beafca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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