grade-rc.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:23:8a:2d:7d:0e:51:14:82:56:e8:50:37:a7:81:eb:26:06 was issued on by Let's Encrypt.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=grade-rc.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:23:8a:2d:7d:0e:51:14:82:56:e8:50:37:a7:81:eb:26:06
Serial Number (int): 273430410290726026430275046681630017791494
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:fb:2c:f5:21:aa:fb:0b:09:e6:e4:a6:21:90:8d:36:bd:69:68:8d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5c:95:86:80:ca:23:08:3b:b2:5e:d4:0a:17:3e:ce:e0:70:f7:7e:33
Fingerprint (sha256): 13:f4:c8:fa:d2:5d:2f:2b:39:e5:59:f5:69:a8:76:3d:d5:74:0d:89:ac:fc:98:b9:ec:9b:32:fb:49:32:79:6b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate grade-rc.de

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grade-rc.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.portal.grade.uni-bonn.de
cam-group.org
circl.portal.grade-rc.de
circl.portal.grade.uni-bonn.de
collaborate.cam-group.org
collaborate.macustar.eu
dev.admin.portal.grade.uni-bonn.de
dev.manage.portal.grade-rc.de
dev.manage.portal.grade.uni-bonn.de
dev.partner.portal.grade-rc.de
dev.partner.portal.grade.uni-bonn.de
dev.portal.grade-rc.de
dev.portal.grade.uni-bonn.de
dirc.portal.grade-rc.de
dirc.portal.grade.uni-bonn.de
files.cam-group.org
files.grade-rc.de
files.grade.uni-bonn.de
files.macustar.eu
grade-rc.de
heidelberg.portal.grade-rc.de
heidelberg.portal.grade.uni-bonn.de
imbie-rp.grade-rc.de
m3.portal.grade-rc.de
m3.portal.grade.uni-bonn.de
macustar.eu
manage.portal.grade-rc.de
manage.portal.grade.uni-bonn.de
ocriplasmin.grade.uni-bonn.de
orca.grade.uni-bonn.de
ovis.augenklinik.uni-bonn.de
partner.portal.grade-rc.de
partner.portal.grade.uni-bonn.de
portal.cam-group.org
portal.grade-rc.de
portal.grade.uni-bonn.de
www.cam-group.org
www.macustar.eu

Other certificates including the domain name grade-rc.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for grade-rc.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273430410290726026430275046681630017791494
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-06 19:56:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-04 19:56:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grade-rc.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 991248027738636738669181065134408622169358758579967136617498732000861798746489203153949257701768832638379052704062389331751586363444767962116744481160453802177903424999582644859638976669148217210636132496814387233768390118444023335222391336820498385973303658238170370533300592855275106589017937287852409053449192421110480939804584218005254559783700876041307189191007128208814007070236778614784996618369577072775558905405445160168440459478496053230075199057153167697316876206128298537671889651035830959126476873684723565441390944173728012888036770872145994518640413200001189456332483945543683374386163974029579140598037639686009080396878072474071325956891315633134559035902506370834529875771048898613708782134289524568325060646401683230823135912169524278896144004291828871146925696497096937696439698333093406458130123000760149659185252804296401952206635982855481105507008366922740851879276358552590919730160769209047885087517723194350093107874886742276155223085917046561668056920018368941274328762308262835241229934356017497088038811187490755903615082262466532147422405691484307081909258817520762415833834521510953151438615646771316899867225932882536774261112810100534708099982302568065091261885321428918384637942182945483718940834099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85fb2cf521aafb0b09e6e4a621908d36bd69688d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1008 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cam-group.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circl.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circl.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.cam-group.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.macustar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.admin.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.manage.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.manage.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.partner.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.partner.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirc.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirc.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.cam-group.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.macustar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heidelberg.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heidelberg.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imbie-rp.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm3.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm3.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macustar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocriplasmin.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orca.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovis.augenklinik.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.cam-group.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cam-group.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macustar.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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