survey.aau.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:16:32:c5:22:61:c0:d3:c5:8a:ca:31:cd:7c:c5:74:88:39 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=survey.aau.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:16:32:c5:22:61:c0:d3:c5:8a:ca:31:cd:7c:c5:74:88:39
Serial Number (int): 356002840778918745363518339794849068517433
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cd:74:1c:a6:c6:95:6d:ef:1d:09:af:a7:08:8d:04:43:99:08:05:47
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fb:37:81:74:4c:2b:15:17:15:cd:fa:d8:6e:a6:70:fc:23:1f:1d:63
Fingerprint (sha256): 11:17:d2:d6:96:38:4f:34:04:fe:a0:01:0e:2e:f6:db:c4:bc:ee:50:0a:2f:43:85:56:f9:58:01:e8:4a:c5:63

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate survey.aau.at

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for survey.aau.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

survey.aau.at
survey.uni-klu.ac.at
www.survey.aau.at
www.survey.uni-klu.ac.at

Other certificates including the domain name aau.at

(limited to 100 certificates)
studdorf.aau.at
clouare.aau.at
shib.aau.at
campus-gis.aau.at
scs-iwas.aau.at
qualitative-content-analysis.aau.at
elearning.aau.at
lab-iid.aau.at
dx-workshop.org
seafile.aau.at
survey-test.aau.at
web-ainf.aau.at
dx-workshop.org
survey.aau.at
ae-ainf.aau.at
seafile.aau.at
pervasive.aau.at
www.stat.aau.at
swilt.aau.at
jobs.aau.at
www.itec.aau.at
ub.aau.at
mobile.aau.at
scs-iwas.aau.at
kiss.aau.at
uniclub.aau.at
lab-iid.aau.at
elearning.aau.at
uniclub.aau.at
narrativeencounters.aau.at
rooms.nes.aau.at
lids.aau.at
doku-inf.aau.at
narrativeencounters.aau.at
ameise.aau.at
icn.itec.aau.at
moodle.aau.at
campusplan.aau.at
newsletter.uniclub.aau.at
scs-iwas.aau.at
bscw.aau.at
wiki.nes.aau.at
dia-2018.aau.at
pfl.aau.at
trusteye.nes.aau.at
informatikwerkstatt.aau.at
vulnscan.zid.aau.at
mailbox.itec.aau.at
pfl.aau.at
tomwinkler.nes.aau.at
svn-itec.aau.at
data.aau.at
ius2.aau.at
sepse-iid.aau.at
www-app1.aau.at
www.aau.at
tech.nes.aau.at
moodle-standby.aau.at
kcgl.aau.at
kindergruppe.aau.at
crowdmeteodata.aau.at
data.aau.at
video.aau.at
apollon.aau.at
aau.at
kiss.aau.at
darwin-isys.aau.at
ius.aau.at
indy.nes.aau.at
codex-management.aau.at
litkult1920er.aau.at
trusteye.nes.aau.at
wiki-ainf.aau.at
mmsys2016.itec.aau.at
ahesn.aau.at
informatik-spl.aau.at
me-sci.aau.at
crosmos.nes.aau.at
dia-2018.aau.at
saner.aau.at
uniclub.aau.at
spiderino.nes.aau.at
doku-inf.aau.at
ide.aau.at
tewiki.uni-klu.ac.at
mc40.aau.at
usionline.aau.at
ius.aau.at
survey.aau.at
mooshak.nes.aau.at
www-php1.aau.at
blog.tewi.aau.at
sauron.aau.at
tomwinkler.nes.aau.at
www.edu.aau.at
aesn-api.aau.at
bbb.aau.at
crosmos.nes.aau.at
www.aau.at
vcs-isbi.aau.at

Certificate

The complete raw certificate details for survey.aau.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356002840778918745363518339794849068517433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-29 08:52:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-27 08:52:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'survey.aau.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 898626053197019247855628139504186060897924985222298415106874895070597305373961913063978667424765157922680051523990227640886830386492368675769544312536502112821872163335266333290287693694462084937260237698935674184367450077586661149260390227215600156948057861307523768045136847755639090306048105144407561358170566419482545268841690885307248983057879841948280189667332519422207944474603473775187290101735546647878781929132678599115489247493632622265446165021785230390184321559437711235833365943230192460765866504470179193823987991422623631251577686723916058461488013086755398806831267400997010842506049839845709580368634955401205132701694110872330341714168105966739941518497171718086351123547233499377826529610999834661033730588863340767682976708406700372407881875398974954616495439548903443410122280576158956393545180003950506822573096504226870294469959346626594310091652893762557543154256536746733688496467273085865175763623129611726793538000614176038482562159565808524864245702581727878017869862742576586057557639939373015094728072501285284988478702734155855899162463463322588788574688160939372686372985291598726486535323846961911987201524764678136865403884300673546467859406164406246291985301611653615475084253175812413966365522583
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd741ca6c6956def1d09afa7088d044399080547
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.aau.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.uni-klu.ac.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.survey.aau.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.survey.uni-klu.ac.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000169c8dd6d710000040300473045022100b4ccde4535c964d99f5d8f54ee7461c39c27dbd860d296881fd78394469c95f7022073dd96abc6b6b3d27dea731057ec1e59d56f4549ec1d617b7dc8ee9f0f5e97ec007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169c8dd6d470000040300473045022041823e854dcefd19bee301e50e880dc572b492e6d2fa6e48069ed44c46ce0d6102210096d8d2ad29aeb17c8c7b03846dbd848a96bd0cde6e06f3d077540c7de5607081
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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