aris.ucc.ovgu.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:77:ef:ce:f1:bf:4f:99:02:4c:02:eb:b0:66:11:eb:98:02 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aris.ucc.ovgu.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:77:ef:ce:f1:bf:4f:99:02:4c:02:eb:b0:66:11:eb:98:02
Serial Number (int): 302149219466235797972679007883077920462850
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e3:92:5f:2c:db:08:55:7d:d9:bc:75:b8:1c:63:ef:c2:3a:d3:52:68
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fa:13:ed:8a:44:1e:72:37:82:fd:3a:bc:c5:da:f6:b5:72:e0:34:3f
Fingerprint (sha256): 0c:d1:30:48:15:e9:dc:65:e5:be:c7:d1:d1:5c:89:01:cf:67:91:bc:84:9b:c0:55:23:ed:7e:f1:9f:49:c5:11

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aris.ucc.ovgu.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aris.ucc.ovgu.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aris.ucc.ovgu.de

Other certificates including the domain name ovgu.de

(limited to 100 certificates)
polarion.stimulate.ovgu.de
diz-ummd-ag.med.ovgu.de
www.danss.ovgu.de
www.cs.ovgu.de
fmbcloud.ovgu.de
stipendium.ovgu.de
www27.ovgu.de
www30.ovgu.de
atlas.ub.ovgu.de
chat.ucc.ovgu.de
moodle-n.ovgu.de
tcms.iks.cs.ovgu.de
evasysweb.imed.uni-magdeburg.de
www24.ovgu.de
spoz.ovgu.de
vconk.ovgu.de
me.stimulate.ovgu.de
a01z.ucc.ovgu.de
a01z.ucc.ovgu.de
vdi-ub.ovgu.de
cloud.ucc.ovgu.de
pages.vc.cs.uni-magdeburg.de
www.apl.ovgu.de
spweb2.med.ovgu.de
www21.ovgu.de
dsms.ovgu.de
vpn10.ucc.ovgu.de
vconub.ovgu.de
m01z.ucc.ovgu.de
moodle.med.ovgu.de
aris.ucc.ovgu.de
docshare-extern.med.ovgu.de
blog.ai.ovgu.de
ontohub.org
cseweb.ivs.cs.ovgu.de
cloud.medienbildung.ovgu.de
a01z.ucc.ovgu.de
facade.med.uni-magdeburg.de
a01z.ucc.ovgu.de
smvpn.iks.cs.ovgu.de
www23.ovgu.de
serrala.med.ovgu.de
w5rs.ovgu.de
ivs-pm.ovgu.de
aris.ucc.ovgu.de
edu.cs.ovgu.de
h01-d00.ucc.ovgu.de
www.euroskills.ovgu.de
wlanauth.ovgu.de
myovgu.ovgu.de
h01-d04.ucc.ovgu.de
finca.cs.ovgu.de
fmbcloud.ovgu.de
bama-fmb.ovgu.de
owncl2.iti.cs.ovgu.de
myfmb.ovgu.de
www31.ovgu.de
wikis.ovgu.de
analytics.ucc.ovgu.de
m01z.ucc.ovgu.de
www.med.uni-magdeburg.de
www15.ovgu.de
webgtds.med.ovgu.de
laraga.ilm.ovgu.de
www.meb.ovgu.de
www.myfmb.ovgu.de
www.ci.ovgu.de
medusa.ovgu.de
pruefer.ovgu.de
vpn.ovgu.de
www.ub.ovgu.de
fmbcloud.ovgu.de
aris.ucc.ovgu.de
cse.cs.ovgu.de
open.ess-project.ovgu.de
ontohub.org
transit.urz.uni-magdeburg.de
webmail.uni-magdeburg.de
prozess-portal.ovgu.de
mediaweb.med.uni-magdeburg.de
mx1.ovgu.de
git.iti.cs.ovgu.de
www.danss.ovgu.de
www30.ovgu.de
vconw.ovgu.de
gitlab.stimulate.ovgu.de
openenergy-platform.org
ph1web01.verw.uni-magdeburg.de
ismir-explorer.ai.ovgu.de
lpm.medienbildung.ovgu.de
bmsg.ovgu.de
nc.ovgu.de
blog.ai.ovgu.de
myfmb.ovgu.de
fww-alumni.ovgu.de
project.stimulate.ovgu.de
redcap-extern.med.uni-magdeburg.de
vpn.ovgu.de
b01z.ucc.ovgu.de
csnvpn.ucc.ovgu.de

Certificate

The complete raw certificate details for aris.ucc.ovgu.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302149219466235797972679007883077920462850
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-27 07:53:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-28 07:53:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aris.ucc.ovgu.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 632716796761092606296281215080855540202366224791842188223275841559699629118933914914865461362853226961987668530199952274347594365179708799426477075849173220922795082576591304226692324373547618303677259008386638592740460867143670302130720456545593891448493473987501357843957532919866859677240894758648037920300213854542093435962434253389750521826854677317140348189823570506900438188454203309425335421482135866189665832376717194211908904327252502393683058531234656222727463996382580183316912084223016545134497088597872103278822035217327121809380718794525292767125341227228336782659182940300138179543977448839732608713884220447094179721561059253559493722591799656546643389294560834513664366433715921546962870009186321188570347067141417025065066134931893601451996736223468258109908478559085817726106600786511142055665270583266106031667532986259229756497746917305042388440572233288630435438027033434501716841366797975862867302545580529587703760709042708696118844668157832382323087033027903943361121604648065952020993639340296788551046709331046665278416842934550195445393507913826388675932554357192313518043835343398160859751540737597224448467496340246311615838440461903855073061763098043277329941883474816606866369209617061121379198063011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3925f2cdb08557dd9bc75b81c63efc23ad35268
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aris.ucc.ovgu.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0087e81aa679e2ee475da2093c44349968cce7238fb840283248effb47e11c696d46072dae5659e3711dd6c8185331c5e16429fccba59560562658ba686669c997c36bf2cb10046f02b7ead6548ff11e19c7425ab4b60403533a0fcba68f7c7ab5574fcd75fc700e3693dc250a23a7a86b23e08bae3e85f17ace630b2f2075c10f1ec4e04f712e27939b49beab318e9428742419ac4240fe33b14d5c86323b8b65d414e9819aa6cdb66efc8996c320b552ef232bd39e17f5c5421084db8656f3ca9569f9a3b4d06ed99123831eabef72f25b8686ea119830cf2e28aae00f40f6e8f9530bc2a553b599e464321d5ccf47e45543ecf753c295d9e138c3a1557d9445