trust.uni-koeln.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ee:f7:ab:3b:58:95:d8:ce:03:54:84:08:7f:5e:a9:82:1c was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=trust.uni-koeln.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:f7:ab:3b:58:95:d8:ce:03:54:84:08:7f:5e:a9:82:1c
Serial Number (int): 342653269523866398204299733736689081352732
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f2:47:77:21:27:03:c3:85:00:56:80:95:59:0f:cd:ed:ff:3d:10:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:42:3d:f0:14:14:16:10:f9:86:ad:64:d9:23:6f:9e:87:be:4e:c0
Fingerprint (sha256): 02:af:9c:24:4b:e0:71:78:69:2a:6f:d4:b8:20:e2:e0:82:e6:4f:89:27:e4:ec:37:23:a1:dc:7c:63:56:e3:60

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate trust.uni-koeln.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trust.uni-koeln.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

trust.uni-koeln.de
vertrauen.uni-koeln.de
www.trust.uni-koeln.de
www.vertrauen.uni-koeln.de

Other certificates including the domain name uni-koeln.de

(limited to 100 certificates)
phil-fak.uni-koeln.de
geographie.uni-koeln.de
crc806dbstatic.uni-koeln.de
arachne.uni-koeln.de
kriminologie.uni-koeln.de
familienvermoegensplanung.jura.uni-koeln.de
dgp2018.uni-koeln.de
covid-gams.uni-koeln.de
gero.uni-koeln.de
fsmed-koeln.de
sonnenbus.uni-koeln.de
sfb806srv.uni-koeln.de
wiso-evaluation.uni-koeln.de
digital.uni-koeln.de
fachschaftneurowissenschaften.uni-koeln.de
mrs.uni-koeln.de
sap-cert.uni-koeln.de
wiso.uni-koeln.de
escon2018.uni-koeln.de
cewis.uni-koeln.de
cler.uni-koeln.de
webmail.uni-koeln.de
beh-workshop.uni-koeln.de
usac.uni-koeln.de
career-hf.uni-koeln.de
biologiedidaktik.uni-koeln.de
besatzungskinder.uni-koeln.de
pj.uni-koeln.de
ccls.phil-fak.uni-koeln.de
physiologie.uni-koeln.de
amaes.uni-koeln.de
klein.uni-koeln.de
www.lab.uni-koeln.de
afrikanistik.phil-fak.uni-koeln.de
et-cc.uni-koeln.de
philosophie.uni-koeln.de
translational-genomics.uni-koeln.de
apcmbp.uni-koeln.de
recall-ttt.uni-koeln.de
geographie.uni-koeln.de
idptest.rrz.uni-koeln.de
sutter.wiso.uni-koeln.de
itn-codeage.uni-koeln.de
soccco.uni-koeln.de
career.phil-fak.uni-koeln.de
usac.uni-koeln.de
fgsp2019.uni-koeln.de
ac1.uni-koeln.de
qm.phil-fak.uni-koeln.de
progserver.informatik.uni-koeln.de
dfr.jura.uni-koeln.de
tem.uni-koeln.de
euwir.jura.uni-koeln.de
fstafrika.phil-fak.uni-koeln.de
dch.phil-fak.uni-koeln.de
chemiedidaktik.uni-koeln.de
polymere.uni-koeln.de
isp2017.rrz.uni-koeln.de
bpl.uni-koeln.de
fg1.phil-fak.uni-koeln.de
auslaenderreferat.uni-koeln.de
staff.uni-koeln.de
sfb806srv.uni-koeln.de
wirtschaftsarchiv.uni-koeln.de
www.cecad.uni-koeln.de
computationalbiology.uni-koeln.de
wisotest17.uni-koeln.de
zhd.uni-koeln.de
sprachfoerderprojekt.phil-fak.uni-koeln.de
lac.uni-koeln.de
digitales.histinst.uni-koeln.de
weiterdenken-si.uni-koeln.de
str2.rrz.uni-koeln.de
cgs.uni-koeln.de
sum.phil-fak.uni-koeln.de
wissrecht.uni-koeln.de
treuhand.uni-koeln.de
sprachlabor.phil-fak.uni-koeln.de
mongoltales.cceh.uni-koeln.de
uklan.rrz.uni-koeln.de
vwibo.verw.uni-koeln.de
chailab.uni-koeln.de
behavioraloperations2014.uni-koeln.de
imsb.uni-koeln.de
computationalbiology.uni-koeln.de
steuerrecht.uni-koeln.de
elearning.uni-koeln.de
www.zvfk.uni-koeln.de
versicherung.uni-koeln.de
lawsoccercup.jura.uni-koeln.de
wigeo.uni-koeln.de
www.kksn-elearning.uni-koeln.de
idm2ccm.rrz.uni-koeln.de
fa-mnf.uni-koeln.de
indecon.uni-koeln.de
zib.phil-fak.uni-koeln.de
schmalz.uni-koeln.de
hsg-sowi.uni-koeln.de
trust.uni-koeln.de
wirtschaftsarchiv.uni-koeln.de

Certificate

The complete raw certificate details for trust.uni-koeln.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7cNlvGKy9MmPfxV25r32
eBjiAV8CFtfKNOS5zdt3mNaXIHcXPhWe7TrUDqjrKWr0QCYVPmuHY8f2I0nMiX2E
7psm8ozVPEutd5AVeg8vjaoMVxvEAR1RSFpUTzQrgUutULkhjrdMBckyc/6Jjnvf
fhqRNz8lEYv8IqZnc+yh5EYvpDDvd4JoiSvzBzW3ZyNSKSZx/COcdjWBgDoTcuTn
WgSoiPx4tzX8U5wdBf4Fuw/GQ/RMhbT4AXvtsA/OWWaj9RCEp9+WvTD+PO/S5Jnu
izU3t8cDolA7Ov0vXEbVDyqIQIUa1v3rRzWQtejq0FBMPBUIwyB6Mk9+opfhZPwt
YUPzWRBXSRCQnX4wZTlyI0LMlw1QXbrExH4EmemehLNRhUTe2uLVH0V4FB066s0Z
B4TI0JiD5HVKmZpuYQ1/y0DPPFtjWT8MtR7Bq2T04RjdhMZMtGTfxd6xoNwGbCsj
MawsObZc24iHwR/rsMakVF0fe1XMqQv+/CUc9g1+k4bbWJ558We6aNptfye2/jqN
2o1J0a27Fgyx+7qV0VOsRMJnDep7fHwlSQrMpNySdU7xDQW+UPCd/ndYvAuEHlmt
sC1Z0GAmBAjrwXNccDiVDbsA2RINHeIoaAGapZ/kkWEilGIrc2toFuQ6I2vIO0Ry
SbsgzQRfLbmzki1j6X5FjfcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342653269523866398204299733736689081352732
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-19 09:35:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-17 09:35:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trust.uni-koeln.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 969989518602873139921194941527748485265758438470667249059275413012868697449762812903037203617099947154985531339683166123941167651891201090017554843012360733868832654776084124219556993545985724561453240133618414521508621685424163131990938859594506964149219951216613814584288920149379330096249785448085702479489222865402699958601870364120777529148317263596423238678649567167046182056223508382139793356040119927363800651106590270836763894629592661344866411290869329644271183820753154521980800849289349133880573599690279311213543443269463844100514482227380558142046506431155779194305114539350948879170747193585378981192045738606509777069069597266117533585649150592249814593642405028554768703507785667360029782162015840057156384386484779958914155135326652689915482466481453181547445737052654708980077717117267011413520976928604685875285864547025710562983582406310572634251778194488461273324112832121732995205923673425810507957201818786599242065185507869475788534526261399492433174552536626851902986462373744586464994823311385343510951608866063546250488598287159200163498273162531638669912319848991424698360537402164350330291078859713214310429459075543667239736010361742523027639251243448056583111480337511448482913695361520952204344004087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f24777212703c38500568095590fcdedff3d1078
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trust.uni-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vertrauen.uni-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trust.uni-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vertrauen.uni-koeln.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164b21b72470000040300463044022072ca172d1b1c377f01c652ea50749d90e69558b04101c7782d1a507b7d96117f0220373a8834dfef6fc6fdef072d922f34c1d0cf477be3cab815c27e393678b038a00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000164b21b73b900000403004730450220535e1afb899ad33c90c0f6adc5e7f06652214af86c2a387fdf2c8c0848ecff10022100c5b4b7307e28713304f9c7f6db412c48c5d29287e6f5abd2f606695b3347f933
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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