www.concur2017.tu-berlin.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:90:ca:4d:d8:5c:18:17:3c:9b:87:07:d3:e1:45:1b:43:00 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.concur2017.tu-berlin.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:90:ca:4d:d8:5c:18:17:3c:9b:87:07:d3:e1:45:1b:43:00
Serial Number (int): 397718712813959706585089165686120115815168
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 84:66:eb:cf:b5:52:42:ce:31:c5:61:8a:12:44:b2:4c:13:81:96:72
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f9:53:e7:0f:df:04:64:7a:91:e8:97:a1:9f:5e:91:31:dd:c3:31:19
Fingerprint (sha256): 03:11:9b:65:70:e3:11:72:60:5e:cf:fd:88:19:66:77:b4:ae:49:64:42:c7:96:e0:d3:8b:60:88:39:26:5d:72

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.concur2017.tu-berlin.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.concur2017.tu-berlin.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.concur2017.tu-berlin.de

Other certificates including the domain name tu-berlin.de

(limited to 100 certificates)
www.dcaiti.tu-berlin.de
f5-nebenblock6.tubit.tu-berlin.de
puma2.inet.tu-berlin.de
www3.tu-berlin.de
video.isis.tu-berlin.de
ubsrvapp01.ub.tu-berlin.de
alex.qu.tu-berlin.de
www.dai-labor.de
f5-nebenblock6.tubit.tu-berlin.de
webident.tubit.tu-berlin.de
www.tu-sport.de
inv.ak.tu-berlin.de
lsf.tubit.tu-berlin.de
uni-flensburg.shib-sp.tubcloud.tu-berlin.de
etherpad.innocampus.tu-berlin.de
www.depositonce.tu-berlin.de
rappsilberlab.org
f2-rd-driess.org.tu-berlin.de
adj.users.ak.tu-berlin.de
uimp-01.tu-berlin.de
ace-hauptblock2.tubit.TU-Berlin.DE
moodle.bzhl.tu-berlin.de
tubit-vbb-01.tubit.win.tu-berlin.de
proxy-tc-02.intern.tu-berlin.de
www.chem.tu-berlin.de
f2-rd-lenz.org.tu-berlin.de
clsw1.physik-pool.tu-berlin.de
srv-peri1.chem.tu-berlin.de
ace-hauptblock4.tubit.tu-berlin.de
serverkneissl.physik.tu-berlin.de
bree.physik.tu-berlin.de
autolab.service.tu-berlin.de
web.physik-pool.tu-berlin.de
ucm-test.tu-berlin.de
ace-nebenblock4.tubit.tu-berlin.de
nubes.bbaw.de
ace-hauptblock3.tubit.tu-berlin.de
ubsrvweb06.ub.tu-berlin.de
rappsilberlab.org
exchange.tu-berlin.de
www.concur2017.tu-berlin.de
view.tubit.tu-berlin.de
ace-nebenblock5.tubit.tu-berlin.de
clsw2.physik-pool.tu-berlin.de
ace-nebenblock5.tubit.tu-berlin.de
vserver1.grundbau.tu-berlin.de
dai-labor.de
ace-nebenblock3.tubit.tu-berlin.de
ace-nebenblock2.tubit.tu-berlin.de
ubsrvweb16.ub.tu-berlin.de
wiki.verkehrsplanung.tu-berlin.de
selfpass.ikm.tu-berlin.de
autolab.service.tu-berlin.de
leibniz-gemeinschaft.tubcloud.tu-berlin.de
intern.sec.t-labs.tu-berlin.de
student-survey.ak.tu-berlin.de
win-dc3.win.tu-berlin.de
ace-nebenblock4.tubit.tu-berlin.de
ace-hauptblock3.tubit.tu-berlin.de
guest41.innocampus.tu-berlin.de
files.snet.tu-berlin.de
gitlab.inet.tu-berlin.de
srv.zfge.tu-berlin.de
viewconserv03.uv.win.tu-berlin.de
shibboleth.innocampus.tu-berlin.de
eb104.tu-berlin.de
www.concur2017.tu-berlin.de
git.ikm.tu-berlin.de
pxe.physik-pool.tu-berlin.de
speedikon-web.svc.tu-berlin.de
pad.innocampus.tu-berlin.de
support.zecm.tu-berlin.de
ace-nebenblock5.tubit.tu-berlin.de
git.snet.tu-berlin.de
voip.zecm.tu-berlin.de
kurse.zems.tu-berlin.de
ubsrvweb12.ub.tu-berlin.de
ubsrvapp18.org.tu-berlin.de
www.events.tu-berlin.de
clt.ak.tu-berlin.de
ace-nebenblock4.tubit.tu-berlin.de
logs.e-relaunch.tu-berlin.de
ace-hauptblock2.tubit.TU-Berlin.DE
ace-nebenblock5.tubit.tu-berlin.de
sichere-stromnetze-durch-monitoring.de
www3.tu-berlin.de
jenkins.dai-labor.de
proxy-tc-04.intern.tu-berlin.de
pam2018.inet.berlin
ace-hauptblock4.tubit.tu-berlin.de
video.isis.tu-berlin.de
hds.voip.tu-berlin.de
ldap-vm1.tu-berlin.de
cloud.tdu.tu-berlin.de
teambe.zecm.tu-berlin.de
ace-nebenblock5.tubit.tu-berlin.de
ns.tu-berlin.de
apt.tubit.win.tu-berlin.de
ucm-03.tu-berlin.de
ace-nebenblock4.tubit.tu-berlin.de

Certificate

The complete raw certificate details for www.concur2017.tu-berlin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397718712813959706585089165686120115815168
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 22:00:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-29 22:00:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.concur2017.tu-berlin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 827745670539159642850097610511444193691764701411527684906680812957538990976880529926401692159722114650504667626156055237113694842525354653227524049568007270205141132798918155637067323367425107531275770594502176331025945867392018959042243941591027669634925333076449634326694705691146835538819397804370920727823847017340361563453180315575896572539646622547499214994010309507004161992057121269494585622479307733165630386730810229658893077972871440747811487853933603006956000805519627446756442820574264357246691303981085017227998078627296890721628584848313579736249368726735198348058431752167445996986883084679561758577781520110131817309736920468263238570020714068877929881631952527443296610042666973800427122257866979756476885628804908791460328808438493552985434504085008135144285508870959559318060222418833817652594090400524326007849341202662663528542852731211394915525352736764310328518007492672216931328483292635775878150026223711494457839363765786209383549409949168634691080796547745257359571557997656911745685395802671755273336532420103103426268641350422260437660864447589531992062927560553238947308123788797995331506807472566732038734937465300034640322370086838886806846656887433830585805205301631846047911740173609734184024192651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8466ebcfb55242ce31c5618a1244b24c13819672
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concur2017.tu-berlin.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170932dbff90000040300483046022100c5226076bdf775378135d2b66fe7a673b69bee36e4dad7a1e21b7a3bba6a0821022100da1e25926db0f784d746ff2b353b4052ccd819ee4551e4780540fe27b3dc0d97007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170932dbfe400000403004630440220717813effe40fb9384236cd7b00cca642131d2d9dc9e52099499b81dfc33e37a02200b1eb47715ccfce3eaf60fb64faa89797b880530446536d0980c424ba91fa6ec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00391c1110b5a71fef9e13ad588e1f3d2c02a53829d7018989b8555e1bbe7d9ebe1fd13d04f07f3d31626a21f9f01927e6210b74d1d07d51f62014f02d65f5efa34748427107b329aaa52bcabde680a3964636f7a7fe5a7d7d7e5e86b023ce6fe61b8e2f1f48c8df45905d8dc2c275ccad37fefc43f543921d82251b52ad5aaea67ce8313ef2e4bd328face229731ca2c4d0dca7b621bbdacf08a5ca0dbee97979c597f316de371bec9784e79683acac8420da61ed8eaddd23a8c38fdecafe60578b1c052683bfeab93552d32a56d354ce4e3236e7ddd6dfd427ab09b6b4df954874313e4cd11abf8f050be1519f4f2874db3e3723be7bd7930fb090d934fd608c