jobs.aau.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7a:c9:03:2e:6c:b3:f4:d0:7a:8d:2e:f7:db:8e:14:25:92 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jobs.aau.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7a:c9:03:2e:6c:b3:f4:d0:7a:8d:2e:f7:db:8e:14:25:92
Serial Number (int): 303118497905281753276028250678385114883474
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f0:42:95:bd:2f:15:71:13:1f:a5:74:c2:a9:8a:e4:a9:86:79:94:1d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2b:e3:66:33:d6:88:2f:56:61:ad:18:9e:47:1f:ba:66:e4:40:14:32
Fingerprint (sha256): 04:40:c4:01:ef:bb:17:40:73:1a:bc:84:8f:c1:8e:a3:3d:17:e7:5c:fc:ff:4f:ee:73:c5:ab:d9:94:77:9e:3b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jobs.aau.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jobs.aau.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jobs.aau.at

Other certificates including the domain name aau.at

(limited to 100 certificates)
studdorf.aau.at
clouare.aau.at
shib.aau.at
campus-gis.aau.at
scs-iwas.aau.at
qualitative-content-analysis.aau.at
elearning.aau.at
lab-iid.aau.at
dx-workshop.org
seafile.aau.at
survey-test.aau.at
web-ainf.aau.at
dx-workshop.org
survey.aau.at
ae-ainf.aau.at
seafile.aau.at
pervasive.aau.at
www.stat.aau.at
swilt.aau.at
jobs.aau.at
www.itec.aau.at
ub.aau.at
mobile.aau.at
scs-iwas.aau.at
kiss.aau.at
uniclub.aau.at
lab-iid.aau.at
elearning.aau.at
uniclub.aau.at
narrativeencounters.aau.at
rooms.nes.aau.at
lids.aau.at
doku-inf.aau.at
narrativeencounters.aau.at
ameise.aau.at
icn.itec.aau.at
moodle.aau.at
campusplan.aau.at
newsletter.uniclub.aau.at
scs-iwas.aau.at
bscw.aau.at
wiki.nes.aau.at
dia-2018.aau.at
pfl.aau.at
trusteye.nes.aau.at
informatikwerkstatt.aau.at
vulnscan.zid.aau.at
mailbox.itec.aau.at
pfl.aau.at
tomwinkler.nes.aau.at
svn-itec.aau.at
data.aau.at
ius2.aau.at
sepse-iid.aau.at
www-app1.aau.at
www.aau.at
tech.nes.aau.at
moodle-standby.aau.at
kcgl.aau.at
kindergruppe.aau.at
crowdmeteodata.aau.at
data.aau.at
video.aau.at
apollon.aau.at
aau.at
kiss.aau.at
darwin-isys.aau.at
ius.aau.at
indy.nes.aau.at
codex-management.aau.at
litkult1920er.aau.at
trusteye.nes.aau.at
wiki-ainf.aau.at
mmsys2016.itec.aau.at
ahesn.aau.at
informatik-spl.aau.at
me-sci.aau.at
crosmos.nes.aau.at
dia-2018.aau.at
saner.aau.at
uniclub.aau.at
spiderino.nes.aau.at
doku-inf.aau.at
ide.aau.at
tewiki.uni-klu.ac.at
mc40.aau.at
usionline.aau.at
ius.aau.at
survey.aau.at
mooshak.nes.aau.at
www-php1.aau.at
blog.tewi.aau.at
sauron.aau.at
tomwinkler.nes.aau.at
www.edu.aau.at
aesn-api.aau.at
bbb.aau.at
crosmos.nes.aau.at
www.aau.at
vcs-isbi.aau.at

Certificate

The complete raw certificate details for jobs.aau.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303118497905281753276028250678385114883474
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-12 00:18:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-11 00:18:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jobs.aau.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 865621342878537525411314748880637227445275078029103344608043178527193401798977516214821597023547455567940024528448364701809759993381728602227438932792261864206195814117009842302421876501491561605427320494468476784771667303007807438842743759873195820421983796519079290356503064274912636069238930255431326599493054029733623539970864584751196379077040654990262872758584310331921560690955862012809819726768741148337933001402693683434436808354324199604155575615028453840525004416722790338678601386189297453602724533327280699990178329579088174505778704500017354723745360445342031994105571070500677154836123660066676115538463514890165849485388274917233743232160745214721560113902226345213673423470944554606068139847838096250137025425750931555707706473157804931450596342541408388109166117484797657014002276199194347618977994812615429205442836384140827539176704503781458512145463793601221298082458313314107606479691763228819722769753720358292951157749994316731284957877912030482016146330582717190522065015265259431272552154196986855813608797731959406909221643668514797115556137287953815125643734481837041301286024349530167843008107051100744452505333772937998229889651265469021043130585090283069745417068720912869170691819073576048615574107323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f04295bd2f1571131fa574c2a98ae4a98679941d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.aau.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f97545be300000403004730450221008149ee6892f0a6615b2ecdfa054c5fc3a1abc7c277ef045606e6143b77334e0b022024ca4e33e5261c545254cdfbb9db8bcd9a4e916d30701ed5f90e7f8250da2be60075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f97545c3a000004030046304402201030c86c4a49501321c62527f57ba58ba03459512ab12ac492d157163c851d3602207b753c7c9d0fab2c2b4abdf210c01a96da87a6f31aba2960db88171ed39fab36
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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