hsg-sowi.uni-koeln.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ec:ff:b4:6c:a9:a7:aa:10:c3:86:f0:8c:43:26:c8:b6:93 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hsg-sowi.uni-koeln.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:ff:b4:6c:a9:a7:aa:10:c3:86:f0:8c:43:26:c8:b6:93
Serial Number (int): 341983386344923593386276992350358057039507
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cf:7d:4b:f4:4f:72:64:b3:32:86:e2:2c:32:8e:b6:d5:8b:e1:20:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 40:4a:16:cb:7b:ef:e9:66:cb:a5:ea:b2:d9:8b:af:62:07:a6:01:0e
Fingerprint (sha256): 02:a9:d0:e3:9c:c3:5d:ff:6f:e2:87:c4:94:b9:b6:85:9e:e0:95:7d:84:89:19:a0:27:c8:f9:68:6a:b0:f3:81

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hsg-sowi.uni-koeln.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hsg-sowi.uni-koeln.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hsg-sowi.uni-koeln.de
www.hsg-sowi.uni-koeln.de

Other certificates including the domain name uni-koeln.de

(limited to 100 certificates)
phil-fak.uni-koeln.de
geographie.uni-koeln.de
crc806dbstatic.uni-koeln.de
arachne.uni-koeln.de
kriminologie.uni-koeln.de
familienvermoegensplanung.jura.uni-koeln.de
dgp2018.uni-koeln.de
covid-gams.uni-koeln.de
gero.uni-koeln.de
fsmed-koeln.de
sonnenbus.uni-koeln.de
sfb806srv.uni-koeln.de
wiso-evaluation.uni-koeln.de
digital.uni-koeln.de
fachschaftneurowissenschaften.uni-koeln.de
mrs.uni-koeln.de
sap-cert.uni-koeln.de
wiso.uni-koeln.de
escon2018.uni-koeln.de
cewis.uni-koeln.de
cler.uni-koeln.de
webmail.uni-koeln.de
beh-workshop.uni-koeln.de
usac.uni-koeln.de
career-hf.uni-koeln.de
biologiedidaktik.uni-koeln.de
besatzungskinder.uni-koeln.de
pj.uni-koeln.de
ccls.phil-fak.uni-koeln.de
physiologie.uni-koeln.de
amaes.uni-koeln.de
klein.uni-koeln.de
www.lab.uni-koeln.de
afrikanistik.phil-fak.uni-koeln.de
et-cc.uni-koeln.de
philosophie.uni-koeln.de
translational-genomics.uni-koeln.de
apcmbp.uni-koeln.de
recall-ttt.uni-koeln.de
geographie.uni-koeln.de
idptest.rrz.uni-koeln.de
sutter.wiso.uni-koeln.de
itn-codeage.uni-koeln.de
soccco.uni-koeln.de
career.phil-fak.uni-koeln.de
usac.uni-koeln.de
fgsp2019.uni-koeln.de
ac1.uni-koeln.de
qm.phil-fak.uni-koeln.de
progserver.informatik.uni-koeln.de
dfr.jura.uni-koeln.de
tem.uni-koeln.de
euwir.jura.uni-koeln.de
fstafrika.phil-fak.uni-koeln.de
dch.phil-fak.uni-koeln.de
chemiedidaktik.uni-koeln.de
polymere.uni-koeln.de
isp2017.rrz.uni-koeln.de
bpl.uni-koeln.de
fg1.phil-fak.uni-koeln.de
auslaenderreferat.uni-koeln.de
staff.uni-koeln.de
sfb806srv.uni-koeln.de
wirtschaftsarchiv.uni-koeln.de
www.cecad.uni-koeln.de
computationalbiology.uni-koeln.de
wisotest17.uni-koeln.de
zhd.uni-koeln.de
sprachfoerderprojekt.phil-fak.uni-koeln.de
lac.uni-koeln.de
digitales.histinst.uni-koeln.de
weiterdenken-si.uni-koeln.de
str2.rrz.uni-koeln.de
cgs.uni-koeln.de
sum.phil-fak.uni-koeln.de
wissrecht.uni-koeln.de
treuhand.uni-koeln.de
sprachlabor.phil-fak.uni-koeln.de
mongoltales.cceh.uni-koeln.de
uklan.rrz.uni-koeln.de
vwibo.verw.uni-koeln.de
chailab.uni-koeln.de
behavioraloperations2014.uni-koeln.de
imsb.uni-koeln.de
computationalbiology.uni-koeln.de
steuerrecht.uni-koeln.de
elearning.uni-koeln.de
www.zvfk.uni-koeln.de
versicherung.uni-koeln.de
lawsoccercup.jura.uni-koeln.de
wigeo.uni-koeln.de
www.kksn-elearning.uni-koeln.de
idm2ccm.rrz.uni-koeln.de
fa-mnf.uni-koeln.de
indecon.uni-koeln.de
zib.phil-fak.uni-koeln.de
schmalz.uni-koeln.de
hsg-sowi.uni-koeln.de
trust.uni-koeln.de
wirtschaftsarchiv.uni-koeln.de

Certificate

The complete raw certificate details for hsg-sowi.uni-koeln.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsfh3dPjoyyjARNT+HDPI
rnOwMIwZHcmOA05FpHXZtPtHG9ZIEMUCaMCitOnOCgIULSeInjHpOvaAZurd/sEH
N9+3caQVpKfypYrI+Z5ljlzl9PbUp1daIa/PLsTeqURYZtOzdVDWmq27iahjOZpo
V/ln58hZh4wt7o486M3QmOvlGUaXlXJEbgwJMVSPLFbGp8cYdZ4BiTx30RndJtWL
lO232fKhNU/ODByWOnhu01x2fMn1YXSi+d0+wpeEPrU1wdyYjFKsSfm3ri3Fs5Q3
1llAYEA7gRjqmymz1Tr7OttPaFryltRFkYy3Z3ZWvylM3dV7LmKKPVrQc4j7xNUK
FQHiyYnEZZnR1WvZS1B1QHeQVQK0alyhyHbyQ4jqjjkw05QO/14bv4MiSSikrt8v
vLA/Si4ICYGQwykbdbQVm1wSFZYZ5JkS+nJbLCuDmtQ3J2GloNea/fsQrhmotu4o
nuvwgQL+KooXQBhsQGT4HKItgloEG5r44JLisLL+HbYJSPyNWwtifMpfI4KSyvfI
dAhO+KaJ2efHctFX5EFi0O+fCPQzLRbfklNHRKldZm4Heg1UbtCfj797ZUr+VEoq
qSK1j+LWO8ExC0TBoyqjqTT0vR5jvsKf/d4+LFwzCuJkCUpz4IzLmI/C/8CIeo8R
WSX4uNZSrgdRUBUl7zWpVDcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341983386344923593386276992350358057039507
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 20:46:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 20:46:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hsg-sowi.uni-koeln.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 726056591475078652354483558349667195022003096740468250509247579936572447483941520541047790346114339274244864068650552958501023709164373223333291149113114732363003277740056858273572867420947524992278066549064092988958500326249945227114887249392231221527933034260102648210352767761027752590486562352076714115074461111417203049569659163843410934992001325220379474483060945907128736497657126212438158964504238368500006018971414697524964819688871260511986755292341302551813853088555209523025277089554667137420642003603187708316568037290003326593774646235780384803622107229231346016353308273469598795924350274611977228045329181696067844025608634521992196301153321653851613230066748627888510262862698296231678723149233287652694501548984569462072927175200203936204685408576511325851161200862506519429718686458085786082963573364947798123156357249672450130547156415127886783979535912447674394267964388776575916068594269810114050512460412615631183912478390955924803368451192908260713250630410959596914991986572472578334644469431174552069498332120108432214043679915531104210052779056694358932220883344554953540112898540798943390036496681153176205297050581340036908233403285675657398993563914893081128101234479854445940997068914447210271205839927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf7d4bf44f7264b33286e22c328eb6d58be12048
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsg-sowi.uni-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsg-sowi.uni-koeln.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f871fc45800000403004730450221009d794ab6bd6b09f387e3a4d9e98f0302913abfaf38eb0c3e82701be57d88ef6c02203c56fe1233da4fc84e35829dc53e5071695edc027784f13ab6f88219a3b10b8600760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f871fc47e00000403004730450220678b2ba9757da77125d03539424b891cf5055ab6c83a11cce187a3b85081a0c3022100bcfb57d0aaa53abd3daaa85e2d7194de55c7e18d3cfcd058e1e7416e3f306b5e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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