auth.life.uni-leipzig.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:81:34:99:83:7b:02:f9:af:d3:69:ab:f0:f7:37:77:18:cd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=auth.life.uni-leipzig.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:81:34:99:83:7b:02:f9:af:d3:69:ab:f0:f7:37:77:18:cd
Serial Number (int): 305303200072023616071151263739547015911629
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:f6:bf:9d:be:d8:60:9c:99:fd:17:7a:34:08:91:be:b4:2d:96:56
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2a:e8:88:b6:7a:29:5b:d6:13:95:e3:fe:47:57:6f:14:88:5f:9f:2a
Fingerprint (sha256): 05:ec:65:9a:19:9d:2a:1a:8a:0e:a9:2f:66:de:c5:5c:6b:ac:51:cb:ba:64:64:44:44:0b:38:21:02:48:75:db

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate auth.life.uni-leipzig.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth.life.uni-leipzig.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.life.uni-leipzig.de

Other certificates including the domain name uni-leipzig.de

(limited to 100 certificates)
misun102.mathematik.uni-leipzig.de
vobtest.uni-leipzig.de
vmcollection.rz.uni-leipzig.de
umfrage.uni-leipzig.de
folio-demo.ub.uni-leipzig.de
www.uni-leipzig.de
lldevelopment.wifa.uni-leipzig.de
exchange.ads.uni-leipzig.de
project.medizin.uni-leipzig.de
sport.uni-leipzig.de
urzdomscom01.dom.uni-leipzig.de
v1.rz.uni-leipzig.de
budgeford.imise.uni-leipzig.de
ldap.ad.uni-leipzig.de
foblive.uni-leipzig.de
ldap2.informatik.uni-leipzig.de
smee.life.uni-leipzig.de
urzubvdicon01.dom.uni-leipzig.de
katalog.ub.uni-leipzig.de
hobbitdata.informatik.uni-leipzig.de
urzaddc1.ad.uni-leipzig.de
bbb.sc.uni-leipzig.de
ub.uni-leipzig.de
pcai017.informatik.uni-leipzig.de
www.uni-leipzig.de
mail.stura.uni-leipzig.de
vmtoxiportal.rz.uni-leipzig.de
urzsfboos.uni-leipzig.de
www.uniklinikum-leipzig.de
nagios.rz.uni-leipzig.de
rzbupvss.dom.uni-leipzig.de
clarinws.informatik.uni-leipzig.de
olat.informatik.uni-leipzig.de
lyncpool.dom.uni-leipzig.de
urzdomrdgw01.dom.uni-leipzig.de
rstudio02.sc.uni-leipzig.de
vmcollection.rz.uni-leipzig.de
srvterminal06.swl.uni-leipzig.de
vdi.wifa.uni-leipzig.de
home.uni-leipzig.de
zugangsproxy.ub.uni-leipzig.de
bsvgit.informatik.uni-leipzig.de
lldevelopment.wifa.uni-leipzig.de
rvs.informatik.uni-leipzig.de
www.uniklinikum-leipzig.de
videocampustest.rz.uni-leipzig.de
lldevelopment.wifa.uni-leipzig.de
ucanmdm.vetmed.uni-leipzig.de
www.uni-leipzig.de
v2.rz.uni-leipzig.de
katalog.ub.uni-leipzig.de
www.uni-leipzig.de
vdi02.wifa.uni-leipzig.de
nikolaus.imise.uni-leipzig.de
pfadi.wifa.uni-leipzig.de
vmtima2.rz.uni-leipzig.de
zvappdam.dom.uni-leipzig.de
kait.health
lex.sozphil.uni-leipzig.de
vpn.medizin.uni-leipzig.de
home.uni-leipzig.de
lb.life.uni-leipzig.de
milab7.mathematik.uni-leipzig.de
kommunikation.uni-leipzig.de
auth.life.uni-leipzig.de
bierfass.bioinf.uni-leipzig.de
exchange.bach-leipzig.de
osa.wifa.uni-leipzig.de
home.uni-leipzig.de
urzdomdc23.dom.uni-leipzig.de
ilias.wifa.uni-leipzig.de
zugangsproxy.ub.uni-leipzig.de
www.hds.uni-leipzig.de
mail.stura.uni-leipzig.de
iis10.imise.uni-leipzig.de
vcs51.wifa.uni-leipzig.de
pvz.uni-leipzig.de
www.uni-leipzig.de
leia.informatik.uni-leipzig.de
domdc1.idmdom.rz.intern.uni-leipzig.de
bachweb3.rz.uni-leipzig.de
alpha.ub.uni-leipzig.de
izbifs3.izbi.uni-leipzig.de
mail.stura.uni-leipzig.de
moodletest.rz.uni-leipzig.de
portal2.medizin.uni-leipzig.de
zvts01.dom.uni-leipzig.de
register.sc.uni-leipzig.de
lldevelopment.wifa.uni-leipzig.de
www.uni-leipzig.de
home.uni-leipzig.de
awts.intern.uni-leipzig.de
lha-dev.imise.uni-leipzig.de
studserv.uni-leipzig.de
qnapnas4.wifa.intern.uni-leipzig.de
clarinoai.informatik.uni-leipzig.de
mail.stura.uni-leipzig.de
intern.finc.info
cloud.kleintierklinik.uni-leipzig.de
fob.uni-leipzig.de

Certificate

The complete raw certificate details for auth.life.uni-leipzig.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmELhhfqh0L6kHfOpqc6y
ba1Wp2gEjb3h/9kzPPV8r6/oa2OWfGOVM4X0o3UQ3EeXYGMgH1JJG2g5L2H3685p
mkGp/XANF66LC53KKmnxA4XbW8LrghqZmhrTKS/Nkh9HS2bmha/x4+L8w3LvKG0n
vaEerDnUEjgIyrYfh55+RwFOFtyZ2wimixRw7BQWyPefkjwjhWkU3E7L0c7rePSZ
8nc+feUp4JL8Ab2BONR1++Um9W1xkOBFFRAfw31poXbqXgCsnBWCGnyalDVoZ+UP
kGy/6Xt//+J61ozXAKP7jSpv2BszU/8NmfOs+I88QRgmPxxpgBIaeTZ0y32YjAuR
B+Fku30iHTAFjyZ5lwtd6vekk4pbH8o4+MA/PCEmaHzFfWBTS4bqcLjgHIGMFRcG
tMZFXR8hB2C6mSFGueKz0U8zzB69cE6Yvv0TqpXrL8WGRvNTwo1YApZJv57KJO3Q
w1lTzsLIRNDULscKAKWfB6Mar6aKzvXXi2lAC0bfRl8lajOLiW3h0pd+SsD00zOl
b54WouK+ygvR8Dx+1Eo1Mosfak2Ra5I8n2KYWLzPf3NhhdshNwdJfHpa7orsdqng
s9FXO5mpV2xM8WYR9I4BElenoKrNcjp7iea34En4tTWpvKs8pxYZPasK3ztffp0D
xNHt7Js9QrpaNCEbEwTySwkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305303200072023616071151263739547015911629
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-01 01:20:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-30 01:20:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.life.uni-leipzig.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 621171720500819399748431813020427705918471210933293268531903243121516312512671488260627444247675543156695466361506087247331542319175712715901089858362645235728236105577918673154396386417330413780942436561294220208598561432321164030124336442266306607614698315721453207058478875832344340439911149334039190484709315623477095725020974306315350235414428124756992739617207392314601489130296351676495113094492456969140958335118167062661129561032294792435742390048057028998020647002595029245427717084620925825605036933296472694060448184002709975563870371378178043172466776620348118140921495445780888789033419771984552313521973899990082190350947783944904757512766330244129969104096487402976899802850158743809714558573557872978454720923403957358738163116855379655601819227434077535680005855528641197785694283691834883659443988073536029867057416135325002789553052775028313669820129457486727953323082104081582817902450805349327622650584469628604776401899695536173763562178182394391763981209447263612633606170357442989213698168853546671661446014417004170800737477588809324489056735331187782321184691958134701880222453617519533547520094478705596644624080635140355675052660326293687229515270041702657245094095232008739788474894908791320583878101769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9af6bf9dbed8609c99fd177a340891beb42d9656
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.life.uni-leipzig.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d851e65f70000040300483046022100e114685046bf7b4885b126fe70b3dc74f8697edce8b704faa22cdd7d4643434f022100efd2a0eceb0dbf6a61bcd110b12bc87a390336bb6cf4e23eec0bc9c2f4637d5200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d851e64f6000004030047304502200ef51417b6010fad4b593c9617ee37b1aa3f4c00518c9f75c6389d1d1d87374f022100f3163e5f89362c17b71798f67153471b4a37e740ff2d92d35e64078cb1511d46
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0039ca2744ec37c50cc52de194b5f5bb5ccd45492d5f6aaf11cef45ab6c1b8ed369cbfb8ceca9c19bfb0e091658d6fbb78dac51e489d7d520896edc2366d5279da1d84fe02652f04f6c9c46d41b6ef110012af0387cb6100848284eb199c64193d3ce2643a96373a0e5f69de6044a86cfd29a8ca74c874e3bed17aa9af44bdf7babfe4b4ca9e663b7a6f2d7981763f49996a0ceb6b7fdd3526d91df08402417b6af95969ca25ee582f15562830b7455907504c731d2f560442182e3ca37fd048dec5cd2d64b3cb6b704395d023a67e0b059a6e2e8e8d3527b45076e6ffc18059437a81b4d25362c410c771b325cd073dbbecb6e935d77a0dea2c8d99c02516ad34