piwik.stellenticket.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:28:03:16:a5:4f:ff:14:01:f5:20:3c:fa:f4:17:6b:63:ec was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=piwik.stellenticket.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:28:03:16:a5:4f:ff:14:01:f5:20:3c:fa:f4:17:6b:63:ec
Serial Number (int): 274952257739572073298650701591626119865324
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e2:a9:22:53:5f:9f:28:4a:6a:52:58:ca:50:64:d6:71:2a:6e:3e:8d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a5:8c:67:98:34:80:13:a8:10:f4:15:6e:41:68:b7:b8:4a:ac:e7:4d
Fingerprint (sha256): 11:de:9b:95:df:0e:82:58:6d:a8:2c:53:01:5b:49:f6:5d:2e:0a:b0:d9:e5:34:3f:49:a9:1f:a0:a8:bd:83:ac

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate piwik.stellenticket.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for piwik.stellenticket.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

piwik.stellenticket.de

Other certificates including the domain name stellenticket.de

(limited to 100 certificates)
office.stellenticket.de
lea.stellenticket.de
hulk.stellenticket.de
leosachsen.stellenticket.de
wiwiberlin.stellenticket.de
hu-berlin.stellenticket.de
wiki.congeno.stellenticket.de
silicon-saxony.stellenticket.de
begruendet.stellenticket.de
begruendet.stellenticket.de
tub.stellenticket.de
*.markus.stellenticket.de
m.begruendet.stellenticket.de
silicon-saxony.stellenticket.de
m.hu-berlin.stellenticket.de
cfe.stellenticket.de
biosaxony.stellenticket.de
conf.stellenticket.de
leosachsen.stellenticket.de
hu-berlin.stellenticket.de
demo.stellenticket.de
lea.stellenticket.de
tub.stellenticket.de
begruendet.stellenticket.de
m.th-wildau.stellenticket.de
leosachsen.stellenticket.de
hulk.stellenticket.de
piwik.stellenticket.de
api.stellenticket.de
m.tud.stellenticket.de
zen.stellenticket.de
stellenticket.de
tub.stellenticket.de
lea.stellenticket.de
piwik.stellenticket.de
markus.stellenticket.de
tub-vak.sp.stellenticket.de
api.stellenticket.de
wiwiberlin.stellenticket.de
tud.stellenticket.de
hulk.stellenticket.de
cfe.stellenticket.de
stellenticket.de
m.tub.stellenticket.de
staging.stellenticket.de
th-wildau.stellenticket.de
hulk.stellenticket.de
caseman.staging.stellenticket.de
begruendet.stellenticket.de
leosachsen.stellenticket.de
m.tub.stellenticket.de
m.leosachsen.stellenticket.de
hulk.stellenticket.de
th-wildau.stellenticket.de
m.tud.stellenticket.de
m.hu-berlin.stellenticket.de
stellenticket.de
conf.stellenticket.de
tub.stellenticket.de
auth.cloud.stellenticket.de
begruendet.stellenticket.de
piwik.stellenticket.de
m.begruendet.stellenticket.de
hu-berlin.stellenticket.de
cfe.stellenticket.de
m.silicon-saxony.stellenticket.de
leosachsen.stellenticket.de
silicon-saxony.stellenticket.de
lea.stellenticket.de
tud.stellenticket.de
*.markus.stellenticket.de
piwik.stellenticket.de
cfe.stellenticket.de
api.stellenticket.de
tud.stellenticket.de
caseman.staging.stellenticket.de
cloud.stellenticket.de
cfe.stellenticket.de
lea.stellenticket.de
wiwiberlin.stellenticket.de
hulk.stellenticket.de
hu-berlin.stellenticket.de
m.hu-berlin.stellenticket.de
tub.stellenticket.de
begruendet.stellenticket.de
hu-berlin.stellenticket.de
silicon-saxony.stellenticket.de
m.tub.stellenticket.de
demo.stellenticket.de
wiwiberlin.stellenticket.de
tub-bzhl.congeno.stellenticket.de
tud.stellenticket.de
silicon-saxony.stellenticket.de
m.th-wildau.stellenticket.de
congeno.stellenticket.de
lea.stellenticket.de
zen.stellenticket.de
trainings.europa-uni.stellenticket.de
hulk.stellenticket.de
m.tud.stellenticket.de

Certificate

The complete raw certificate details for piwik.stellenticket.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274952257739572073298650701591626119865324
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-19 20:14:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-17 20:14:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'piwik.stellenticket.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 658644253748306483378144618703044574235594317952030762088470857306845278772422519248622459563166102060241452051747067055379240603270166911566545099177068245397348259590614193351495348729274286840302183149599952679209560873051079852318759863903618877557742759581056137814776376668821512550386235808348645584541449958229893741617364243389712310627415382445882524187776398721786786230699122404337061017076906214091739064457635538658677201986864318883546451189997426407984842999018919871041088926671250600873331307486915091486207755234152368736934248525913331797866160221324964630628158685087597981966419097730514169521557930838719147920822451329730867207324061213602581388269093705085581731997260758843328253615994973044261632303880488090608999936569014708375881239432625806920608943874526162678124786090644153433049500965032297611517091810040625717092096015034238164597475770296275096747248866155381533353463832889823456485771509308074018607725447236431164533039588152023599112933059918621672055826091663596010344739477447394198826752002650270515347175578985150070545764016264865422564450712549175828240615629464396815890440435620526326994665762602142379292046045646222552593693570031217426453115292461468765273586339123766771473208579
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2a922535f9f284a6a5258ca5064d6712a6e3e8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piwik.stellenticket.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b719737a9000004030046304402205d12a65d343257f41a99df35b2299eb59fb78404b9a3da65e77ad7351656eab6022064858cc8b6c522f5c6af9621b80fdd4083a731b27707eda1850c5de46d319960007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b719737a30000040300483046022100a3b52e3a45799632f34663d2244a0a68f00738ce2a6a9d6070e0d78d21a20f7f022100c1d5aa32a8d5aa8d6fc12a0e6af998c61c28e1d557e79d5bb12ddf01596560bf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00211f5570c3ab94dd9dc26d1a4d40c15cb50328f041da5507d6bddfc82e49fbfbb9e80279c45b7ecbc281680244b817e35968229a328f8503ab5eeffbb9691de718c2f244c520f8f83a8974e31f1aaa25e964c0d5312c5120eabc1548c11573aa394664158f0bc8d4f44afe7defaa3289e2a823390046cbc1d7d38bd3851fdf2605637a884d3ff61d7989a5e4d14b6365c398c8d981102cb1cc945d1afdb295f2e04693cbdc84a2459a83e3ca2511a8d1636bda704d90d6dc6bd61ca8ae6c5ab241b51d1d4e9f68fb4a97661494fcb0d45d8a3550b3fc1288befb203267938c68aa7f38c321619dfb17f6b807d34f6ece5c02d62f35e464d7e71d161aefb19a2d