aris.ucc.ovgu.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:99:0f:4f:eb:3f:53:3c:1f:ed:88:08:b2:32:d6:d8:77:1b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aris.ucc.ovgu.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:99:0f:4f:eb:3f:53:3c:1f:ed:88:08:b2:32:d6:d8:77:1b
Serial Number (int): 313420413316956313877924817469173256451867
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a4:f8:d9:65:50:bf:76:32:05:06:86:f5:6f:d0:22:bd:3c:29:89:3a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e1:94:1c:4e:05:8c:97:0c:14:e9:b0:78:22:2a:67:39:34:1c:6a:30
Fingerprint (sha256): 08:fd:ec:10:dc:97:c5:c5:6b:4c:82:c1:59:3d:66:45:26:c5:62:93:bc:0a:63:e9:bd:85:ff:f3:70:8a:44:f2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aris.ucc.ovgu.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aris.ucc.ovgu.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aris.ucc.ovgu.de

Other certificates including the domain name ovgu.de

(limited to 100 certificates)
polarion.stimulate.ovgu.de
diz-ummd-ag.med.ovgu.de
www.danss.ovgu.de
www.cs.ovgu.de
fmbcloud.ovgu.de
stipendium.ovgu.de
www27.ovgu.de
www30.ovgu.de
atlas.ub.ovgu.de
chat.ucc.ovgu.de
moodle-n.ovgu.de
tcms.iks.cs.ovgu.de
evasysweb.imed.uni-magdeburg.de
www24.ovgu.de
spoz.ovgu.de
vconk.ovgu.de
me.stimulate.ovgu.de
a01z.ucc.ovgu.de
a01z.ucc.ovgu.de
vdi-ub.ovgu.de
cloud.ucc.ovgu.de
pages.vc.cs.uni-magdeburg.de
www.apl.ovgu.de
spweb2.med.ovgu.de
www21.ovgu.de
dsms.ovgu.de
vpn10.ucc.ovgu.de
vconub.ovgu.de
m01z.ucc.ovgu.de
moodle.med.ovgu.de
aris.ucc.ovgu.de
docshare-extern.med.ovgu.de
blog.ai.ovgu.de
ontohub.org
cseweb.ivs.cs.ovgu.de
cloud.medienbildung.ovgu.de
a01z.ucc.ovgu.de
facade.med.uni-magdeburg.de
a01z.ucc.ovgu.de
smvpn.iks.cs.ovgu.de
www23.ovgu.de
serrala.med.ovgu.de
w5rs.ovgu.de
ivs-pm.ovgu.de
aris.ucc.ovgu.de
edu.cs.ovgu.de
h01-d00.ucc.ovgu.de
www.euroskills.ovgu.de
wlanauth.ovgu.de
myovgu.ovgu.de
h01-d04.ucc.ovgu.de
finca.cs.ovgu.de
fmbcloud.ovgu.de
bama-fmb.ovgu.de
owncl2.iti.cs.ovgu.de
myfmb.ovgu.de
www31.ovgu.de
wikis.ovgu.de
analytics.ucc.ovgu.de
m01z.ucc.ovgu.de
www.med.uni-magdeburg.de
www15.ovgu.de
webgtds.med.ovgu.de
laraga.ilm.ovgu.de
www.meb.ovgu.de
www.myfmb.ovgu.de
www.ci.ovgu.de
medusa.ovgu.de
pruefer.ovgu.de
vpn.ovgu.de
www.ub.ovgu.de
fmbcloud.ovgu.de
aris.ucc.ovgu.de
cse.cs.ovgu.de
open.ess-project.ovgu.de
ontohub.org
transit.urz.uni-magdeburg.de
webmail.uni-magdeburg.de
prozess-portal.ovgu.de
mediaweb.med.uni-magdeburg.de
mx1.ovgu.de
git.iti.cs.ovgu.de
www.danss.ovgu.de
www30.ovgu.de
vconw.ovgu.de
gitlab.stimulate.ovgu.de
openenergy-platform.org
ph1web01.verw.uni-magdeburg.de
ismir-explorer.ai.ovgu.de
lpm.medienbildung.ovgu.de
bmsg.ovgu.de
nc.ovgu.de
blog.ai.ovgu.de
myfmb.ovgu.de
fww-alumni.ovgu.de
project.stimulate.ovgu.de
redcap-extern.med.uni-magdeburg.de
vpn.ovgu.de
b01z.ucc.ovgu.de
csnvpn.ucc.ovgu.de

Certificate

The complete raw certificate details for aris.ucc.ovgu.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313420413316956313877924817469173256451867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-05 05:44:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-03 05:44:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aris.ucc.ovgu.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 626215639273490839427460521792671981245299749128629464910303664885222837932169547321426526449198204676753785782431136375568569283414339822874200580076828284419077704064937119260636738807290836477037104243901444419243322604994106986026283873812768377426161238415247017352661643976462597428835446887935856456339302054979990987769680667519988545555247613939871586215406751124826265480234301550717310181968153096401129038462716594335882710477420935156843705667450736271485849926241973479662535226981301664190607167191979096138123563473105771115897451265612167497813650083970104699485163356086460780250583912516424314336251406503698272481206121579768862381044627204840335723730994202054606513820001050302181073740084556505052736814610051177431508477576767022070621647701638373334785351364219709890915051256393566472749870243032691286366818718804382391361326772836908197336263946371636006846884327518974026157441167064062464904446377138865024290583927366082453000306234354581402618104681243967793040942501440142458686775328600026735600574075228429088878173449398352607858703092779185125993337172051276942542179025026394620647829531386986143069529393220208626685281089862615950338294308434337121233559053168391685827232427574901872296050751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4f8d96550bf7632050686f56fd022bd3c29893a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aris.ucc.ovgu.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c6085cf8a0000040300463044022022d275aaec1f177fc64eccb3e5622f95a03e34d0148f5b499d9ef076efa6553902203cec90f2477fe0639a14f0b2fb56489ad37ed37ee88130aa8aa79a4665160d00007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c6085d18a000004030047304502206aa2052e09836f214223e171294ec76bf19a90f2446839a8c8c059cfa24952230221008b196e04d32b7fa2417a5d2e0531695b83b70adb3f8c7868c04f20cadc0c5726
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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