unistor.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:48:3a:60:d1:79:d4:87:10:3b:21:2c:4f:bb:c3:14:1e:f1 was issued on by Let's Encrypt.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=unistor.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:48:3a:60:d1:79:d4:87:10:3b:21:2c:4f:bb:c3:14:1e:f1
Serial Number (int): 373027072078278489351080818065097664765681
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ae:a2:27:46:d5:61:93:0c:eb:f6:e4:cd:72:cd:c6:42:53:6c:2f:e5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 07:3b:1a:c7:48:d9:79:f0:92:bc:ac:f6:ed:53:92:df:e9:71:8a:16
Fingerprint (sha256): 09:ba:e6:18:b8:e2:d6:c3:6f:65:d1:40:8e:24:1d:45:d1:86:f8:b4:99:20:97:19:0c:48:11:2a:ba:d6:6f:1a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate unistor.de

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for unistor.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

24ip.web2desk.de
com.thinking-machines.com
dvs.web2desk.de
easyjob.seaside-productions.de
fg-wp.web2desk.de
files.seaside-productions.de
ftp.seaside-productions.de
git.unistor.de
monitor.unistor.de
nasec.de
nextcloud.nasec.de
office.nasec.de
rdp.nasec.de
repo.unistor.de
s-t-e.com
talk.klopapierkriese.de
tipico.seaside-productions.de
unistor.de
unistor.web2desk.de
web2desk.de
wiki.unistor.de
www.nasec.de
www.s-t-e.com
www.unistor.de
www.web2desk.de

Other certificates including the domain name unistor.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for unistor.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK23YirEgy4ZD5hf1+he
piOK5EkeXdKNOpbMBZs5YxxgOPeKhUtXR44VyIPADWwf/M73pgMaMn17UI+hDWzh
AkBWbgjpuTsqtvjoLvEi2wln14cmMF/i404DvaZCI3eaQ9eGoCiQbxVu8suCEHLm
rcK60VXTz/nKD6kx1w7cwXYKvQhmpDXXh9dgpr7xuCxFtA0oiES2T5hITJO+Yz64
QugZ3rwrA5Y9wz2M8Dms9EuzU/flSummg8L28aYR+C5/wKQQAdRtWUVuKbue8Q9i
CjjV7W0qbxGtNWb5GzcN8z4InivcbhhDJ0eNbrbB0G9LVIhPuX43078oqzKPx4nr
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373027072078278489351080818065097664765681
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 11:46:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-22 11:46:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'unistor.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25333323713977831368953301321119780718111846705417237848702915523821936522982197399051413002968405226177791068817949317248255885128887824786179225830612532362483502363266931893295607546959265276887840518134971132162299703139387710885291554168141553058771525574722293245664457230330555791160729968665921430484546275289196032231696696871927410142765910075801738852931662133042908579239109949821448336014963757716698013443442201187225945774341077119017024806352936858551384361391033376077364184839422332768703505075865144351815421886745194255949069981410644605527797990466140391198167991284074427111064102607382012095351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aea22746d561930cebf6e4cd72cdc642536c2fe5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '24ip.web2desk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.thinking-machines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvs.web2desk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyjob.seaside-productions.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fg-wp.web2desk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.seaside-productions.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.seaside-productions.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.unistor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.unistor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud.nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdp.nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repo.unistor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's-t-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talk.klopapierkriese.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tipico.seaside-productions.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unistor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unistor.web2desk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web2desk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.unistor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.s-t-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unistor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web2desk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001710c94804f0000040300463044022022f9766a9208a13251c771db95b0826e88b97b214ada1143b52c47df2fe4c1b002204c7aa982498430810b09ea208f211b7cecc13393c6aec70883cf034f299accbb00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001710c94808100000403004630440220686702200f5fbb626f63a77113493c03fd39bc460218237f24379fb3bd7b2cdf022056da2c27c27dc29a23252527c00985a534f03cebf925ef157f54d831ef325a93
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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