eficst.ercim.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a4:a5:fb:af:d3:bb:e0:ba:b0:42:b4:52:62:c4:59:c5:fa was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eficst.ercim.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a4:a5:fb:af:d3:bb:e0:ba:b0:42:b4:52:62:c4:59:c5:fa
Serial Number (int): 317363795422327619616012907401739637474810
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fe:3f:a4:97:f8:31:05:df:82:63:f9:8d:89:ee:54:b2:74:2b:d4:07
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c6:d4:02:c8:b2:bb:c8:18:2e:8c:6a:85:45:a6:0e:12:2c:cf:9a:9e
Fingerprint (sha256): 1d:4a:3d:c7:f8:51:60:0a:41:b4:cb:cd:48:2f:50:1c:66:78:d9:c7:72:86:33:91:24:5f:90:95:10:5e:65:4d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate eficst.ercim.eu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eficst.ercim.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eficst.ercim.eu
eficst.eu
www.eficst.eu

Other certificates including the domain name ercim.eu

(limited to 100 certificates)
eficst.ercim.eu
bscw.ercim.eu
bscw.ercim.eu
webmail.sophia.ercim.eu
webmail.sophia.ercim.eu
ercim-news.ercim.eu
www.ercim.eu
wiki.ercim.eu
strews.ercim.eu
paasage.ercim.eu
ercim-news.ercim.eu
paasage.ercim.eu
strews.ercim.eu
fellowship.ercim.eu
www.ercim.eu
openmediaweb.ercim.eu
paasage.ercim.eu
wiki.ercim.eu
paasage.ercim.eu
trac.ercim.eu
webmail.sophia.ercim.eu
svn.ercim.eu
bscw.ercim.eu
trac.ercim.eu
webmail.sophia.ercim.eu
gitlab.ercim.eu
eficst.ercim.eu
strews.ercim.eu
ercim.eu
easyts-egi-old.ercim.eu
svn.ercim.eu
ercim-news.ercim.eu
svn.ercim.eu
lists.ercim.eu
eficst.ercim.eu
bscw.ercim.eu
ercim-news.ercim.eu
trac.ercim.eu
trac.ercim.eu
wiki.ercim.eu
fellowship.ercim.eu
easyts-egi-test.ercim.eu
webmail.sophia.ercim.eu
fellowship.ercim.eu
ercim-news.ercim.eu
fellowship.ercim.eu
bscw.ercim.eu
stats.ercim.eu
www.ercim.eu
bscw.ercim.eu
svn.ercim.eu
eficst.ercim.eu
lists.ercim.eu
bscw.ercim.eu
paasage.ercim.eu
wiki.ercim.eu
strews.ercim.eu
vre4eic.ercim.eu
stats.ercim.eu
stats.ercim.eu
easyts-test.ercim.eu
easyts-egi-old.ercim.eu
trac.ercim.eu
bscw.ercim.eu
www.ercim.eu
ercim.eu
stats.ercim.eu
lists.ercim.eu
wiki.ercim.eu
trac.ercim.eu
svn.ercim.eu
trac.ercim.eu
paasage.ercim.eu
strews.ercim.eu
fellowship.ercim.eu
lists.ercim.eu
paasage.ercim.eu
fellowship.ercim.eu
paasage.ercim.eu
strews.ercim.eu
svn.ercim.eu
lists.ercim.eu
www.ercim.eu
ercim-news.ercim.eu
eficst.ercim.eu
strews.ercim.eu
strews.ercim.eu
ercim.eu
lists.ercim.eu
webmail.sophia.ercim.eu
*.ercim.eu
lists.ercim.eu
wiki.ercim.eu
easyts-egi.ercim.eu
lists.ercim.eu
wiki.ercim.eu
stats.ercim.eu
trac.ercim.eu
www.ercim.eu
fellowship.ercim.eu

Certificate

The complete raw certificate details for eficst.ercim.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317363795422327619616012907401739637474810
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-24 15:02:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-24 15:02:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eficst.ercim.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735613351441156580351337041525550360875252320553365103767695995042621368880712518017366849824030110151547872000822160004807771181884782283229031622072254546068633205845667476305927607632186352373145730551662175707858059886326675335343999066527615094288806860639783196702208656549344140072768746421492298138279776724895137005133016521293219879580305809726739500084961115191796853798329124970754282384846653561960635350675054523450325873705406064029408162333863217898495695471539606318759438809046078247745754403795002548415185584455578882540351018588814761345032068309686154790619454361312754944688798260196026189287977831890426503148002268350616394021898922698977040692651110117647553555871959359499720084693402036479934830209332558486469201407204823176421484002823254782912325128106134975302480939136113626275562235875224615536409533933346645952633560583597554863190408903074957795301790739006114990954249429658879925867854703465690812400205535952198195875663007597937679231640879156188739662916686548751840327665937195433684989241386566997049052322671887574743987928061257869136825838390155868501215335567910279867542606975608184942769808257176339177736484039184930698682005683695949431786882169586613404797884318718469776443998387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe3fa497f83105df8263f98d89ee54b2742bd407
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eficst.ercim.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eficst.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eficst.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168809955080000040300483046022100d7568565f768299df0ca92b0bb7523e77936cad056e39dcbdce88145bacfec03022100e2f1131a943abc07591dd7ba38d046f7419a1f85cbf8dd701c98520593e1d48400750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168809955090000040300463044022038adf7ab38c9e75fedece3bc26a37e98d18e7c63c1ef74c724b31ddc7cda63290220313df5146129798426f0e2d4ef1739f02a9d403a1cbe64c22051fa532feafe53
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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