cloud.ucc.ovgu.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:63:4d:fc:fb:8f:2c:30:e9:0a:b6:c2:cf:72:c8:e3:2b:c4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cloud.ucc.ovgu.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:4d:fc:fb:8f:2c:30:e9:0a:b6:c2:cf:72:c8:e3:2b:c4
Serial Number (int): 295128476237165551347011352109637441891268
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 19:81:fe:bd:49:36:d9:a4:57:da:c6:70:68:73:e2:dc:74:18:5f:c7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cb:27:60:d4:ae:0e:a2:49:d0:29:b9:ca:a0:4b:6a:cb:c6:f7:7d:e1
Fingerprint (sha256): 03:7f:54:74:15:f5:26:27:84:0e:1f:a6:f7:29:ef:b0:14:3e:ef:65:8a:b6:b0:76:27:55:e8:0f:99:1b:e8:b1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cloud.ucc.ovgu.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cloud.ucc.ovgu.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cloud.ucc.ovgu.de

Other certificates including the domain name ovgu.de

(limited to 100 certificates)
polarion.stimulate.ovgu.de
diz-ummd-ag.med.ovgu.de
www.danss.ovgu.de
www.cs.ovgu.de
fmbcloud.ovgu.de
stipendium.ovgu.de
www27.ovgu.de
www30.ovgu.de
atlas.ub.ovgu.de
chat.ucc.ovgu.de
moodle-n.ovgu.de
tcms.iks.cs.ovgu.de
evasysweb.imed.uni-magdeburg.de
www24.ovgu.de
spoz.ovgu.de
vconk.ovgu.de
me.stimulate.ovgu.de
a01z.ucc.ovgu.de
a01z.ucc.ovgu.de
vdi-ub.ovgu.de
cloud.ucc.ovgu.de
pages.vc.cs.uni-magdeburg.de
www.apl.ovgu.de
spweb2.med.ovgu.de
www21.ovgu.de
dsms.ovgu.de
vpn10.ucc.ovgu.de
vconub.ovgu.de
m01z.ucc.ovgu.de
moodle.med.ovgu.de
aris.ucc.ovgu.de
docshare-extern.med.ovgu.de
blog.ai.ovgu.de
ontohub.org
cseweb.ivs.cs.ovgu.de
cloud.medienbildung.ovgu.de
a01z.ucc.ovgu.de
facade.med.uni-magdeburg.de
a01z.ucc.ovgu.de
smvpn.iks.cs.ovgu.de
www23.ovgu.de
serrala.med.ovgu.de
w5rs.ovgu.de
ivs-pm.ovgu.de
aris.ucc.ovgu.de
edu.cs.ovgu.de
h01-d00.ucc.ovgu.de
www.euroskills.ovgu.de
wlanauth.ovgu.de
myovgu.ovgu.de
h01-d04.ucc.ovgu.de
finca.cs.ovgu.de
fmbcloud.ovgu.de
bama-fmb.ovgu.de
owncl2.iti.cs.ovgu.de
myfmb.ovgu.de
www31.ovgu.de
wikis.ovgu.de
analytics.ucc.ovgu.de
m01z.ucc.ovgu.de
www.med.uni-magdeburg.de
www15.ovgu.de
webgtds.med.ovgu.de
laraga.ilm.ovgu.de
www.meb.ovgu.de
www.myfmb.ovgu.de
www.ci.ovgu.de
medusa.ovgu.de
pruefer.ovgu.de
vpn.ovgu.de
www.ub.ovgu.de
fmbcloud.ovgu.de
aris.ucc.ovgu.de
cse.cs.ovgu.de
open.ess-project.ovgu.de
ontohub.org
transit.urz.uni-magdeburg.de
webmail.uni-magdeburg.de
prozess-portal.ovgu.de
mediaweb.med.uni-magdeburg.de
mx1.ovgu.de
git.iti.cs.ovgu.de
www.danss.ovgu.de
www30.ovgu.de
vconw.ovgu.de
gitlab.stimulate.ovgu.de
openenergy-platform.org
ph1web01.verw.uni-magdeburg.de
ismir-explorer.ai.ovgu.de
lpm.medienbildung.ovgu.de
bmsg.ovgu.de
nc.ovgu.de
blog.ai.ovgu.de
myfmb.ovgu.de
fww-alumni.ovgu.de
project.stimulate.ovgu.de
redcap-extern.med.uni-magdeburg.de
vpn.ovgu.de
b01z.ucc.ovgu.de
csnvpn.ucc.ovgu.de

Certificate

The complete raw certificate details for cloud.ucc.ovgu.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295128476237165551347011352109637441891268
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-24 06:10:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-22 06:10:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cloud.ucc.ovgu.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 774698395932579193329661252153565971308782734736913577437871806252104497279613857378874732705588935008989270434661568180801968414949345615511292846658596745611727003882916251027540181329126749231375089415799491646808362620361067265483015962847687344870525280455703132768613787279937946212711300892021109023607214797009392825579610907024812725440614628775142990082813198327304749495941312800946392046668962610854759555015796351306977955498125588577759145034002267664394606077359640685014959953470444324991992793351382524171053203942433680437438478306101878294533552928986441641189580527952719490434697781870444914482649463992400652227580364181884432533460796700160527179308124920151950565805721471832410780663694565507294124886630854044743831579688724398627618940796136688386421073172670515953742563654792420298464581694714339697466646270810875032108980995494241720507062367376543963805708821162015491811586566635563079167791351885457896224585893010378525283627821040712521471855831070331228860727379922959496448137081619056168619052369856027095705044690495414355127921002527308132682842447827576599724282031855600554722997591159378649957636657052011014814334478911793515022514853422137348376674645140530602915681553851467265177296753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1981febd4936d9a457dac6706873e2dc74185fc7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.ucc.ovgu.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b8852252300000403004830460221009ba132c758bc2f342689465f3247f786a9bee922b6d1fe8e2dae14984cbfc35a022100d62664cde479962af1ce5263d8764f4a15fc2ce02f49f625cebd860f1c5b715f00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b8852251600000403004630440220604e8b34d6ac0dcd121e96aa87f502df888792a720523297bb10db0051d054920220116721efc80afae54f2173417b8f4aeab29786a13c5b3dc1d84ff43d321a4622
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004cc510f84391b4aa24141036e1395c1f9e5df8f83f44cd0fa34f8a2d87d0ed3ee5301b546058575031dbc631091e117b4f588904fb5ca1ca6686f4684bf29a088110e4ed24bc4252d85357877463c6b5be38cd78d9d7f8e60ed6c06c165dd94cfa0ad0b3cfee9a8f24317b7d89e4df741f0b28c4d2e9c76c5f4c79f362cd9fd91aa14783694d2a8a17005a7a17127b7223fb9a10943d6d0511fb2cb446bf45f22e619c9508bdb86fec54834f5b9011d72ae98d17e84b9c4a0b87dba56020b57b80d369cc147ef0a9c2836bdede6307070db389aae3b116b4dc5eefe09369405d237615f1c71078eb75e9d65ca05d89ab51840391a125f791f9eda8c6efb5f35c