raspbian.bio.lmu.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:5b:fc:36:38:c7:9a:db:16:45:a1:a6:7c:f3:c1:1d:1c:4e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=raspbian.bio.lmu.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5b:fc:36:38:c7:9a:db:16:45:a1:a6:7c:f3:c1:1d:1c:4e
Serial Number (int): 379750086107443814138602053078038928497742
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ed:17:a6:9c:a3:d8:94:06:81:41:37:bc:96:31:4c:ac:bc:c4:09:14
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f3:79:d2:0b:f2:51:41:4a:ce:87:37:1d:44:2a:ac:f1:2b:bd:2c:0c
Fingerprint (sha256): 04:5c:e3:2e:ed:87:3b:57:de:66:ae:24:e2:7a:36:fe:4d:7f:f1:c8:f4:6c:b7:88:98:80:b1:c7:2a:3e:49:32

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate raspbian.bio.lmu.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for raspbian.bio.lmu.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

raspbian.bio.lmu.de
raspbian.biologie.uni-muenchen.de

Other certificates including the domain name lmu.de

(limited to 100 certificates)
debian.bio.lmu.de
wwwv1.mwn.de
lmussl.verwaltung.uni-muenchen.de
webmail.fs.lmu.de
evol.bio.lmu.de
www.physcos.physik.uni-muenchen.de
hilbert.bio.ifi.lmu.de
wwwv1.mwn.de
philo.fs.lmu.de
printserv.cip.ifi.lmu.de
cloud-11.bio.lmu.de
automatx.pms.ifi.lmu.de
backstage2.pms.ifi.lmu.de
f11-apache-2.fak11.uni-muenchen.de
f11-apache-2.fak11.uni-muenchen.de
www.portal.graduatecenter.uni-muenchen.de
lmussl18.verwaltung.uni-muenchen.de
wwwv1.mwn.de
www.e-assessment.uni-muenchen.de
zoomorphologie.bio.lmu.de
www.physcos.physik.uni-muenchen.de
webcontent.ifkw.uni-muenchen.de
wwwv1.lrz.uni-muenchen.de
en.zoomorphologie.bio.lmu.de
hilbert.bio.ifi.lmu.de
collab.lmu.de
www.cip.ifi.lmu.de
sysbot.bio.lmu.de
webcontent.ifkw.uni-muenchen.de
filr.fak11.lmu.de
webarchiv-ulrich-beck.soziologie.uni-muenchen.de
wwwv1.lrz.uni-muenchen.de
lmussl00.verwaltung.uni-muenchen.de
hilbert.bio.ifi.lmu.de
lmussl16.verwaltung.uni-muenchen.de
autoconfig.bio.lmu.de
skk2016.komparatistik.lmu.de
boxmodeling.meteo.physik.uni-muenchen.de
owncloud.physik.lmu.de
devuan.biologie.uni-muenchen.de
efvbachelor.ifi.lmu.de
lmussl19.verwaltung.uni-muenchen.de
zammad.fs.lmu.de
wwwv1.lrz.uni-muenchen.de
monitoring.fs.lmu.de
raspbian.bio.lmu.de
en.alumni.bio.lmu.de
wwwv1.lrz.uni-muenchen.de
www.graduiertenkolleg.physik.uni-muenchen.de
pwp.um.ifi.lmu.de
backstage.pms.ifi.lmu.de
ldap4.pms.ifi.lmu.de
imap.cip.ifi.lmu.de
www.exgal.physik.lmu.de
racktables.rz.ifi.lmu.de
hosting.itz.fak13.lmu.de
anthropologie.bio.lmu.de
mi.fs.lmu.de
chemie.fs.lmu.de
www.lehrevaluation.uni-muenchen.de
svn.medien.ifi.lmu.de
tr175.bio.lmu.de
ssh.ifi.lmu.de
pviad2.ifi.lmu.de
psy.fs.lmu.de
www.dwl.aegyptologie.lmu.de
www.en.pms.ifi.lmu.de
wwwv1.lrz.uni-muenchen.de
buildbot.sosy.ifi.lmu.de
lmussl17.verwaltung.uni-muenchen.de
hub.bwl.uni-muenchen.de
vfp-archaeologie.fs.lmu.de
efvbachelor.ifi.lmu.de
mi.fs.lmu.de
stila2.pms.ifi.lmu.de
turing64.bio.ifi.lmu.de
behavioural-ecology.bio.lmu.de
collab.lmu.de
www.en.uni-muenchen.de
homepages.physik.uni-muenchen.de
www-comp.sosy.ifi.lmu.de
webmail-gst.physik.uni-muenchen.de
www.tcs.ifi.lmu.de
anthropologie.bio.lmu.de
biologie.uni-muenchen.de
ic2.cip.ifi.lmu.de
mmi1.um.ifi.lmu.de
lmussl11.verwaltung.uni-muenchen.de
www.medien.ifi.lmu.de
wwwv1.mwn.de
wwwv1.mwn.de
ojs.ub.uni-muenchen.de
smtpin.ifi.lmu.de
germanistik.fs.lmu.de
efvbachelor.ifi.lmu.de
www.nanosys.physik.lmu.de
www.exgal.physik.lmu.de
mail.genzentrum.lmu.de
www.erdbeben-in-bayern.de
www.oc.med.lmu.de

Certificate

The complete raw certificate details for raspbian.bio.lmu.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyMWeUrkcnJW+cnXDTJV
cXr7pQLaDO4p4/BdVIepN5HyiKVovtv4lE3VnwWtSJb81OsJJ0oMvLl6MzQ98Oew
NeSvq/jLaGx/xkxs+gp3Kb3dneimttBi9vn+G/4p5p5yF9NDC0DopW/JfCPpwlAX
S+zeRG4d2lSLyB4M8dPVJSJAHe8RGeBdLqjKGowjlAyTmFApokq7srrZO7+/Tbx/
x5g61Y2h1+B74ypoImaXC+JaBw00hppC35ingCt4Ns8fw36miL6I4soLOySpL/O6
KfnOCjY7CCrMhuT59cHtVbmCbyqJkG1zFTDOgLhWKjbbn+JnXkZZTrrd2gmlNUxm
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379750086107443814138602053078038928497742
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-24 01:29:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 01:29:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'raspbian.bio.lmu.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22613959022194603342733733777505707909680837321712536135710411142643569182159622882330037586420638410738747410900361661024812243914076196256942635180472274562553073222841085636910837021283681523995568157994057093322118767017043626844187970595513859562517318468528753841920567355650202501470022750870949970188515217839948377906079027593560835531509183206442115067781711509665483699198824852642753706077998613026938007197659933064588310395321203363869099197649415807786177479852739594180620961738776225477531645041818699957867971770540403847955504830948233780507707303516606755959237093368281626168261501113441375249963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed17a69ca3d89406814137bc96314cacbcc40914
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raspbian.bio.lmu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raspbian.biologie.uni-muenchen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e9b3dd5710000040300463044022025c8a77242e1d828ea0cb07b692f9f08b0e3df1cf6f1b17196c17609f3d9a8b702200b40cce87cf80172675dd82deb6424798abd0d45930ca0aebb8c73741965925500750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e9b3dd5980000040300463044022009287aabbf2ebfa080b0189cf839748a6d2fa69ce0ba5f5dc4bb0b1ea057b5a60220789a3e3abcc98ca2ceb485e7ce637f45a2780245fc1be8eca63685d0016d74ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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