m.tud.stellenticket.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:61:f5:20:47:b9:da:77:70:df:8e:ee:80:f1:50:2c:b0:25 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=m.tud.stellenticket.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:61:f5:20:47:b9:da:77:70:df:8e:ee:80:f1:50:2c:b0:25
Serial Number (int): 294670075853854452450914640376054244225061
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5a:04:32:4b:d3:5a:61:6e:41:f5:5e:23:c9:77:81:40:b9:41:b3:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 61:87:33:e6:c9:a3:31:e9:f8:fa:20:b2:f9:bd:ed:81:20:92:20:c0
Fingerprint (sha256): 0f:20:1b:36:da:05:a0:22:45:48:47:e3:fa:17:88:36:db:60:a3:70:41:85:01:64:6b:45:a9:4c:2e:30:6f:9e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate m.tud.stellenticket.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for m.tud.stellenticket.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

m.tud.stellenticket.de

Other certificates including the domain name stellenticket.de

(limited to 100 certificates)
office.stellenticket.de
lea.stellenticket.de
hulk.stellenticket.de
leosachsen.stellenticket.de
wiwiberlin.stellenticket.de
hu-berlin.stellenticket.de
wiki.congeno.stellenticket.de
silicon-saxony.stellenticket.de
begruendet.stellenticket.de
begruendet.stellenticket.de
tub.stellenticket.de
*.markus.stellenticket.de
m.begruendet.stellenticket.de
silicon-saxony.stellenticket.de
m.hu-berlin.stellenticket.de
cfe.stellenticket.de
biosaxony.stellenticket.de
conf.stellenticket.de
leosachsen.stellenticket.de
hu-berlin.stellenticket.de
demo.stellenticket.de
lea.stellenticket.de
tub.stellenticket.de
begruendet.stellenticket.de
m.th-wildau.stellenticket.de
leosachsen.stellenticket.de
hulk.stellenticket.de
piwik.stellenticket.de
api.stellenticket.de
m.tud.stellenticket.de
zen.stellenticket.de
stellenticket.de
tub.stellenticket.de
lea.stellenticket.de
piwik.stellenticket.de
markus.stellenticket.de
tub-vak.sp.stellenticket.de
api.stellenticket.de
wiwiberlin.stellenticket.de
tud.stellenticket.de
hulk.stellenticket.de
cfe.stellenticket.de
stellenticket.de
m.tub.stellenticket.de
staging.stellenticket.de
th-wildau.stellenticket.de
hulk.stellenticket.de
caseman.staging.stellenticket.de
begruendet.stellenticket.de
leosachsen.stellenticket.de
m.tub.stellenticket.de
m.leosachsen.stellenticket.de
hulk.stellenticket.de
th-wildau.stellenticket.de
m.tud.stellenticket.de
m.hu-berlin.stellenticket.de
stellenticket.de
conf.stellenticket.de
tub.stellenticket.de
auth.cloud.stellenticket.de
begruendet.stellenticket.de
piwik.stellenticket.de
m.begruendet.stellenticket.de
hu-berlin.stellenticket.de
cfe.stellenticket.de
m.silicon-saxony.stellenticket.de
leosachsen.stellenticket.de
silicon-saxony.stellenticket.de
lea.stellenticket.de
tud.stellenticket.de
*.markus.stellenticket.de
piwik.stellenticket.de
cfe.stellenticket.de
api.stellenticket.de
tud.stellenticket.de
caseman.staging.stellenticket.de
cloud.stellenticket.de
cfe.stellenticket.de
lea.stellenticket.de
wiwiberlin.stellenticket.de
hulk.stellenticket.de
hu-berlin.stellenticket.de
m.hu-berlin.stellenticket.de
tub.stellenticket.de
begruendet.stellenticket.de
hu-berlin.stellenticket.de
silicon-saxony.stellenticket.de
m.tub.stellenticket.de
demo.stellenticket.de
wiwiberlin.stellenticket.de
tub-bzhl.congeno.stellenticket.de
tud.stellenticket.de
silicon-saxony.stellenticket.de
m.th-wildau.stellenticket.de
congeno.stellenticket.de
lea.stellenticket.de
zen.stellenticket.de
trainings.europa-uni.stellenticket.de
hulk.stellenticket.de
m.tud.stellenticket.de

Certificate

The complete raw certificate details for m.tud.stellenticket.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294670075853854452450914640376054244225061
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-30 16:14:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 16:14:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'm.tud.stellenticket.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761637692413600617560653382354171426600735923644496914598103814939816938779472909891090480972335056881304797891507089629963951049167884954988284845037542749621424632514993561911231912474135335367834954749317983467305999245588869949274325239314969019775456067153979889919480439357755122994693011264538063122480539905153499072718141427039323570083663886601265481723429314053666787588567433824265901733202084316700677966657045096424947646706042516380099612775177583432257695255631179293877513302543892587923378607594859605688129538098421988009366209139397950507011307796342800489698896712276718563777406683982334657402214912077286894067687524847352142991719836886251262496841638835883850364581349001382453636212816957683151633536856498274800794369073618464297145151916393343478226204329439791100352279830808466478783850550872165521346054112007272284429268457264734469994529863384876373981100275354675090152249634428568188597543250951064930315692916202062587334745171031295102488531719894870054281630388168290983876794377827328254934800763204097170931051666229882323928826690025999349907909637063362276974066359373797828918697207523621184892155402190642716657672458135919641427445679946738523530497756570747336213026582350680619318741191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a04324bd35a616e41f55e23c9778140b941b306
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tud.stellenticket.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001689fc11bdc0000040300473045022070b62b342b9f76932785b7a4fb62357e07af5660c87a56465eed1cc8b09f0349022100983945d3b894562549771089dddff8636969bd0301be7a0d26e1126e4b2eb6f400770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001689fc119e70000040300483046022100a3bbd8051c623b1de76fde89d4920bd7bc9ab96dd9422cf1b9dcc3bedec6d574022100d099f139851716a3cd31c3603b2557b3a0d7791954532e71bc499ac3df40f71d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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