portal-se.de

- Johannes Gutenberg-Universitaet Mainz -

Issued by JGU CA - G01

About this certificate

This digital certificate with serial number 17:c8:a8:42:94:d6:5f was issued on by Johannes Gutenberg-Universitaet Mainz.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DigitalSignature ContentCommitment KeyEncipherment DataEncipherment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Johannes Gutenberg-Universitaet Mainz

Organization: Johannes Gutenberg-Universitaet Mainz
Organization unit: IMBEI
State / Province: Rheinland-Pfalz
Locality: Mainz
Country: DE

Johannes Gutenberg-Universitaet Mainz

Organization: Johannes Gutenberg-Universitaet Mainz
State / Province: Rheinland-Pfalz
Locality: Mainz
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 17:c8:a8:42:94:d6:5f
Serial Number (int): 6694549461456479
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: af:ea:38:73:7a:1e:0c:2a:ef:cc:6f:6b:44:97:a0:9d:51:5f:66:fa
AuthorityKeyId: 33:18:39:3d:55:34:58:70:a3:ac:af:f0:8c:fb:9a:47:22:3d:4f:cd

Fingerprint (sha1): ff:29:11:5b:21:49:35:fc:4a:3a:64:b9:5b:8d:4c:c2:51:50:3f:3e
Fingerprint (sha256): 1d:37:fc:d8:a3:95:f2:c3:a5:13:a1:a8:7d:37:82:54:6c:66:02:98:7e:d8:03:04:ec:9f:c0:1f:03:9b:28:e0

Issuing Certificate URL: http://cdp1.pca.dfn.de/uni-mainz-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/uni-mainz-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/uni-mainz-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/uni-mainz-ca/pub/crl/cacrl.crl

Check the revocation status for certificate portal-se.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal-se.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal-se.de
www.portal-se.de

Other certificates including the domain name portal-se.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for portal-se.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6694549461456479
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mainz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johannes Gutenberg-Universitaet Mainz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JGU CA - G01'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-24 07:37:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-23 07:37:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mainz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johannes Gutenberg-Universitaet Mainz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IMBEI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal-se.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 704668297216416621112443200968867874304823407898764699621053815320209980626923119335765437496456780425860522993146190594920457339007953384680336537631932754092745646528013894197838976541372165761121362099609092388152475313002624505063445624458116043931890411493055488497754411960316755663378472292529907091035779546787961914550293189419038880922149261477825806677267223759162912968839836921417385729311966223234349307496773502153917738866948856299818462616499157372323382758270463810945199483147617105720718999838479422903238775463686864713107520243149795904267781881920313731939338336942408288205419015549894259638774203672146917911575391002952269143171594110447608212974559760149937325065179637258062347687153548969668410239764127958851805787321107407011081940510311696125212869506143701737931105875135854651015570077889048888059108515846694202021295377800190474754627327067483185994610648424853645343764048325281463996640643765785312902875304143116786381137095683103743339204632273357375304325332400497657856594567981652920157912677957294125129292795518927366190482180721850035651248518065105773484689554939310366815710782153742543438913899540761321317780848458320655671868840105446527911426861390455977112194876473671829192421239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							afea38737a1e0c2aefcc6f6b4497a09d515f66fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3318393d55345870a3acaff08cfb9a47223d4fcd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-se.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portal-se.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/uni-mainz-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/uni-mainz-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (198 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/uni-mainz-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/uni-mainz-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0084b845c7160844fa3ae45f5bd0eed61a43950222acd3feaa95bc13a5dd93d2a70177dc06dfb8070e72a6070b546061e4aee35c50b379982b599310ca4b786bf80ec993bb8e6612518b352ddd109b157646fc8f725b6db7eedf4ba77b2274d2490be291f70907d7b36c564bb66b626a74efddf8266bda6c0c26449eb1570e111f6b05d068b717b04cf5bb62a294619e5191a94b107fe1332fcf5a279a869c13559f5e21318eb5e1de26ab4323334a2873dff8d40d662c7ded8d2e6e0dc64400535798b81dd45a09f30f386ee0eaeee2b1bdd771eb4c4c769ab9c2fc15c4ca3334417dc7a3859a1e879e21132ea5b774c3a7f2ca8dfdce5c079694852c46ed7d15