isefs.uni-due.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1c:5f:80:d7:ce:91:f6:74:d2:2d:f6:db:97:fb:ed:44:22 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=isefs.uni-due.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1c:5f:80:d7:ce:91:f6:74:d2:2d:f6:db:97:fb:ed:44:22
Serial Number (int): 358103995651508962566227355863527723975714
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ca:2d:13:6f:4c:0e:e0:45:f3:fd:cf:02:6d:15:a1:87:89:70:81:0a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 81:ca:d0:bc:23:46:f5:08:c4:ed:ee:01:e3:18:4a:7f:93:b9:13:29
Fingerprint (sha256): 03:07:0e:6d:91:3e:5f:33:60:d6:2b:14:c6:78:31:62:fd:4c:b6:73:ed:9e:c1:b0:1a:45:79:32:80:eb:b0:57

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate isefs.uni-due.de

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for isefs.uni-due.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

files.isefs.uni-due.de
isefs.uni-due.de
lists.isefs.uni-due.de
nextcloud.isefs.uni-due.de
webmail.isefs.uni-due.de
wiki.isefs.uni-due.de
www.isefs.uni-due.de

Other certificates including the domain name uni-due.de

(limited to 100 certificates)
limesurvey.allgpsy.uni-due.de
allgpsy.uni-due.de
hivemanager-ng.wlan.zim.uni-due.de
r940xa-esx-bio09.cvis.uni-due.de
jira.is.inf.uni-due.de
mail1.wiwinf.uni-due.de
jack-hsn.s3.uni-due.de
nxcl.fwc-cim.uni-due.de
cebar-raumverwaltung.allgpsy.uni-due.de
limesurvey.allgpsy.uni-due.de
paluno.uni-due.de
gitlab.vs.uni-due.de
jack-server04.s3.uni-due.de
matush.wiwinf.uni-due.de
wiki.fsri.uni-due.de
nanoboard.iw.uni-due.de
www.elfe.wiwi.uni-due.de
www.mhb-mathematik.uni-due.de
vdi-vcsa01.win.uni-due.de
iot.energiemanagement.tgm.uni-due.de
kilives.vs.uni-due.de
moodle.uni-due.de
ns2.netz.uni-duisburg-essen.de
office.zim.uni-due.de
retmaan.is.inf.uni-due.de
www.syssec.wiwi.uni-due.de
sparql.es.uni-due.de
archiv.psychmeth.uni-due.de
insights-baumeister.allgpsy.uni-due.de
janus.theochem.uni-due.de
blogs.uni-due.de
www.elokov.wiwi.uni-due.de
shiny.ub.uni-due.de
fin-ztree.wiwinf.uni-due.de
isefs.uni-due.de
web01.mhci.uni-due.de
owoche.fsri.uni-due.de
otrs.uni-duisburg-essen.de
www.ebus.wiwi.uni-due.de
km-test.win.uni-due.de
www.is.inf.uni-due.de
stipendium.w.uni-due.de
piwik.w.uni-due.de
smtp.is.inf.uni-due.de
source.ub.uni-due.de
janus.theochem.uni-due.de
www.beagle.msm.uni-due.de
www.pim.wiwi.uni-due.de
services.ub.uni-due.de
etherpad.uni-due.de
lib-intel-test.ub.uni-due.de
paluno.uni-due.de
www.rwpc.msm.uni-due.de
commodiswiki.s3.uni-duisburg-essen.de
pim-umfrage.wiwinf.uni-due.de
*.gitpages.uni-due.de
jack-server18.s3.uni-due.de
server.uni-due.de
portal.wiwinf.uni-due.de
fruehstudium.w.uni-due.de
nanoboard.iw.uni-due.de
nc.tdr.uni-due.de
paluno.uni-due.de
www.oek.wiwi.uni-due.de
janus.theochem.uni-due.de
transformingtransport.paluno.uni-due.de
uee-web.wiwinf.uni-due.de
jack-server16.s3.uni-due.de
www.iis.wiwi.uni-due.de
pl10.physlab.uni-due.de
labbook-med.escience.uni-due.de
redmine.uni-due.de
www.wpunco.wiwi.uni-due.de
workshop.cinch.uni-due.de
autotool.fmi.uni-due.de
eggnog.is.inf.uni-due.de
vpn.uni-due.de
time2-3.uni-duisburg-essen.de
gitlab.theochem.uni-due.de
www.op-us.wiwi.uni-due.de
etherpad.uni-due.de
isefs.uni-due.de
www.mas.wiwi.uni-due.de
www.ebus.wiwi.uni-due.de
shop.uni-due.de
prozessportal.uni-due.de
www.bielschowsky.de
www.ibes.wiwi.uni-due.de
primo.uni-due.de
zim.web.uni-due.de
jack-romanistik.s3.uni-due.de
sse.uni-due.de
view-esx-bau01.cvis.uni-due.de
www.thp.uni-due.de
www.vs.uni-due.de
radius1.uni-duisburg-essen.de
campus.uni-due.de
gitlab.mas.uni-due.de
www.wida.wiwi.uni-due.de
stubo.w.uni-due.de

Certificate

The complete raw certificate details for isefs.uni-due.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11R3QOOw/rnsI2sdk5q9
H6XBdffbgEFXUYCYlOw/nxJExigUN4Ck7CNNMTTUK91dvFZNCPcCsdvZv+Kf9ct/
Tn55fWuuAfGinFXiiPz9UGSRNLpik02SHpw5xqMcJZd8fLBTdT1RQz7JSppDl3nE
iNfiK0LahBwVijMvPcxrJr8rWx0KqUsfVgF/LV65FM+eIgeW2opLzkMDqSUqS/lM
cZkYAhF3cyzVtE/++q0LYAw1ekJOuMpB1qMlRqfD/sYnxMRv5GJ4Q9tLhtGm7NtZ
dhFtPhUO4t/t/10Bwua5GaR8YR89MElThd/ngBnO7KQTPHo4Cbp0gQLDCLz5Ss1/
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358103995651508962566227355863527723975714
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-14 06:30:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-12 06:30:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'isefs.uni-due.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27182887222769230054260273830242264607230231788155278597845742670113825903468320961963309095202099804562083280278367063032865512765305906910940970507980928512810185622253064335524743826780537128926502513800849897839383871428118448413909414142944601224938861457114465415228975011263817758122954134818298489273202788442872947951739776612953831229524893461130422472299612856049853197675948117081273284388916315990608897197914246049018188049693458464809383291677088427528242397706015822405098766812690024397661315258012554210470302860729992815294334823381416503712281411053525455067522890776350110545719562459368706113499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca2d136f4c0ee045f3fdcf026d15a1878970810a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.isefs.uni-due.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isefs.uni-due.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.isefs.uni-due.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud.isefs.uni-due.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.isefs.uni-due.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.isefs.uni-due.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isefs.uni-due.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e68d1e2ec00000403004630440220324ef34eed5dd3b601ea75732a68dc9e8094ac947d8eab64921ca03e31d5cf2b022030315a9d69a0a49c5d09b753077cedd385fab93bb2eb10a7484e7b025cc88f7a0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e68d1e51f000004030046304402200ad336cb02ba5d49a9cbb0ce48446c1607f9c0f7b6f573b97696c558452c255c022022821ddbacbd6bbfd8062dfc8e9ed69c234030c6636af715154655b5804f6dc6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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