cores.ukb.uni-bonn.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:47:15:a9:c1:23:d8:b0:58:cb:6c:b8:ba:43:14:1a:f7:8e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cores.ukb.uni-bonn.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:47:15:a9:c1:23:d8:b0:58:cb:6c:b8:ba:43:14:1a:f7:8e
Serial Number (int): 372637986981853294256753476842945446082446
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3a:39:83:01:72:ed:6e:bc:c3:5b:81:3a:7d:62:c2:d2:c1:2a:53:8e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f5:e9:25:6d:bc:80:f7:08:f1:8d:45:50:43:41:13:dd:3b:83:d0:ad
Fingerprint (sha256): 03:90:c1:3a:ca:62:95:61:a6:11:ae:b5:c9:3a:54:61:1f:99:0f:5b:49:b7:a6:5a:e5:ac:aa:4b:b6:ed:9f:4d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cores.ukb.uni-bonn.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cores.ukb.uni-bonn.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

btc.uni-bonn.de
cores.ukb.uni-bonn.de

Other certificates including the domain name uni-bonn.de

(limited to 100 certificates)
bbbfallback.informatik.uni-bonn.de
weblogin.physik.uni-bonn.de
iweb.meb.uni-bonn.de
www.tumorzentrum-bonn.de
gitlab.geo.uni-bonn.de
agp-vpn.rhrz.uni-bonn.de
www.vorklinikstage.uni-bonn.de
ems.math.uni-bonn.de
vpn-test.rhrz.uni-bonn.de
fdi-s3.uni-bonn.de
container-registry.hrz.uni-bonn.de
merry.ulb.uni-bonn.de
wiki.zem.uni-bonn.de
zveshop.verwaltung.uni-bonn.de
ins.uni-bonn.de
www.bonngutstage.uni-bonn.de
ortsnc.verwaltung.uni-bonn.de
cytometry.uni-bonn.de
trave.math.uni-bonn.de
bonfor.uni-bonn.de
xerox-og.meteo.uni-bonn.de
www1.hiskp.uni-bonn.de
ova-vpn.ova.uni-bonn.de
intranet.ais.uni-bonn.de
sp.uni-bonn.de
iweb.meb.uni-bonn.de
cens.uni-bonn.de
slk.informatik.uni-bonn.de
peene.math.uni-bonn.de
www.arithmeum.uni-bonn.de
mail.uni-bonn.de
gosa-dev.gosa.uni-bonn.de
www.bonngutstage.uni-bonn.de
webconf.meteo.uni-bonn.de
www.lms.uni-bonn.de
cytometry-ldap.uni-bonn.de
ad1.iai.uni-bonn.de
userserver.informatik.uni-bonn.de
hio-web-test.uni-bonn.de
proxmox-info4.cs.uni-bonn.de
chat.zem.uni-bonn.de
bbbfallback.informatik.uni-bonn.de
www.uni-bonn.de
sympa.vi.cs.uni-bonn.de
ea-author.rhrz.uni-bonn.de
cores.ukb.uni-bonn.de
web3.physik.uni-bonn.de
jester.uni-bonn.de
www.zhf.uni-bonn.de
confluence.bzh.uni-bonn.de
ad0.iai.uni-bonn.de
docs.physik.uni-bonn.de
www.lateinamerikazentrumstage.uni-bonn.de
k8stest-sealed-secrets.uni-bonn.de
agthoma.hiskp.uni-bonn.de
www.mnfstage.uni-bonn.de
styx.asta.uni-bonn.de
lwf-vpn.rhrz.uni-bonn.de
wiki.physik.uni-bonn.de
jhub.physik.uni-bonn.de
sms.wiwi.uni-bonn.de
csengine-test.rhrz.uni-bonn.de
mailer.ukb.uni-bonn.de
portal.grade-rc.de
imbie.meb.uni-bonn.de
admin-wiki.home.ins.uni-bonn.de
www.arithmeum.uni-bonn.de
prb.verwaltung.uni-bonn.de
butterbur05.iai.uni-bonn.de
www.or.uni-bonn.de
prb.verwaltung.uni-bonn.de
merry.ulb.uni-bonn.de
cores.ukb.uni-bonn.de
tools.net.cs.uni-bonn.de
warnow.math.uni-bonn.de
v-for1.ilb.uni-bonn.de
mail.ins.uni-bonn.de
www.uni-bonn.de
www.versoehnungstage.uni-bonn.de
www1.hiskp.uni-bonn.de
mx.hiskp.uni-bonn.de
sentry.hive.cs.uni-bonn.de
drze-vpn.rhrz.uni-bonn.de
www.philfak.uni-bonn.de
wahlen.uni-bonn.de
hicap.uni-bonn.de
pi01.hrz.uni-bonn.de
portal.grade-rc.de
intern.hrz.uni-bonn.de
warnow.math.uni-bonn.de
kata.doelger.uni-bonn.de
butterbur01.iai.uni-bonn.de
smtpclient-sol.iai.uni-bonn.de
ems.math.uni-bonn.de
smtpub.iai.uni-bonn.de
gast-bonnet4.uni-bonn.de
hcm.uni-bonn.de
tm.verwaltung.uni-bonn.de
rds-sap.verwaltung.uni-bonn.de
www.cb.uni-bonn.de

Certificate

The complete raw certificate details for cores.ukb.uni-bonn.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4euPgrkpNvMyyc43+K+
wBYPB+AV7jkRSylfeHKLgTzpOAjf3pLgDTuIZtJwMIPhWf0CQN97JyTHtPJp5EA4
cy9eEfTMsYhNhU1ouepG7IkyewKuuFh3geENLRcYxImR81b8gutj9X43w0Ppglkr
yNBasj7QPTtdtSN4AoaWP9rLcZt2R2o2GObQsrARJLpwaGobD6qG+Ws0j4DXRGzV
OdaiifGYKcdLbFb8LAsSmnRtzFDMinYP8fdfyxSKzPdeJz4JKJ4KwAMEpqxOxaBC
YKaA1Yrm3OIjuEVc0+7EkGxQw3YUdnVJ0g0LnQarZAcRDfNbXBTcKmUQWjS31zjQ
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372637986981853294256753476842945446082446
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 10:48:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 10:48:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cores.ukb.uni-bonn.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22663563203289321986172740779909748515139487590426185779055605775595196489298204380423941520624140685772293785548222185697635148590697687297929731852734098648288244172994123634454364088379654676509818582651293598192613777778035747842826051476200976204526044636945582015752777171729547642848350272107612854202832424718395615294669087151964323409585891153969629057214437043541328516061495271762154577238152277108486966560821213372312728948953671366126778833899817487110062822532142381199853402566440948364491560611595221796866372156774678796208658583672613133158537000757642292627866261929507974155776579861234128048211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a39830172ed6ebcc35b813a7d62c2d2c12a538e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btc.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cores.ukb.uni-bonn.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016be0dd08f60000040300473045022100db4eb20264784a0c0d627b5d8520abeaaf94b34291500575848cb4295faf7f88022075c6e42a161d55913f81d412f56d996444d44760a8cd566876701d112b059cfd007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016be0dd08c40000040300483046022100e20ab2ead44a2c829aa05d4a4c305571bf850e0eb5abe3f580cc4816b294c4b20221008ade952010a1b5d8700561cb71c1deebbd76c21885069dfc3f4de994c4179d40
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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