eeo.aau.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f7:64:c6:f9:52:55:e3:f5:1e:89:ae:75:ac:9e:f8:a2:87 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eeo.aau.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f7:64:c6:f9:52:55:e3:f5:1e:89:ae:75:ac:9e:f8:a2:87
Serial Number (int): 432632844287712550990084545508966825239175
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1e:0d:8f:30:88:e9:7b:d4:6b:40:f4:2e:bc:bc:e0:ac:65:4d:64:fa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f1:dd:a2:5b:6f:8a:ed:6f:a4:6a:6a:20:cc:04:c3:92:b0:0f:6b:79
Fingerprint (sha256): 24:ae:9f:bd:fd:b2:b8:ec:17:d9:d8:6c:eb:d6:5f:b2:15:be:f8:cd:a3:70:7a:da:3f:f0:4b:be:60:c7:7c:97

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate eeo.aau.at

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eeo.aau.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eeo.aau.at
eeo.uni-klu.ac.at
www.eeo.aau.at

Other certificates including the domain name aau.at

(limited to 100 certificates)
studdorf.aau.at
clouare.aau.at
shib.aau.at
campus-gis.aau.at
scs-iwas.aau.at
qualitative-content-analysis.aau.at
elearning.aau.at
lab-iid.aau.at
dx-workshop.org
seafile.aau.at
survey-test.aau.at
web-ainf.aau.at
dx-workshop.org
survey.aau.at
ae-ainf.aau.at
seafile.aau.at
pervasive.aau.at
www.stat.aau.at
swilt.aau.at
jobs.aau.at
www.itec.aau.at
ub.aau.at
mobile.aau.at
scs-iwas.aau.at
kiss.aau.at
uniclub.aau.at
lab-iid.aau.at
elearning.aau.at
uniclub.aau.at
narrativeencounters.aau.at
rooms.nes.aau.at
lids.aau.at
doku-inf.aau.at
narrativeencounters.aau.at
ameise.aau.at
icn.itec.aau.at
moodle.aau.at
campusplan.aau.at
newsletter.uniclub.aau.at
scs-iwas.aau.at
bscw.aau.at
wiki.nes.aau.at
dia-2018.aau.at
pfl.aau.at
trusteye.nes.aau.at
informatikwerkstatt.aau.at
vulnscan.zid.aau.at
mailbox.itec.aau.at
pfl.aau.at
tomwinkler.nes.aau.at
svn-itec.aau.at
data.aau.at
ius2.aau.at
sepse-iid.aau.at
www-app1.aau.at
www.aau.at
tech.nes.aau.at
moodle-standby.aau.at
kcgl.aau.at
kindergruppe.aau.at
crowdmeteodata.aau.at
data.aau.at
video.aau.at
apollon.aau.at
aau.at
kiss.aau.at
darwin-isys.aau.at
ius.aau.at
indy.nes.aau.at
codex-management.aau.at
litkult1920er.aau.at
trusteye.nes.aau.at
wiki-ainf.aau.at
mmsys2016.itec.aau.at
ahesn.aau.at
informatik-spl.aau.at
me-sci.aau.at
crosmos.nes.aau.at
dia-2018.aau.at
saner.aau.at
uniclub.aau.at
spiderino.nes.aau.at
doku-inf.aau.at
ide.aau.at
tewiki.uni-klu.ac.at
mc40.aau.at
usionline.aau.at
ius.aau.at
survey.aau.at
mooshak.nes.aau.at
www-php1.aau.at
blog.tewi.aau.at
sauron.aau.at
tomwinkler.nes.aau.at
www.edu.aau.at
aesn-api.aau.at
bbb.aau.at
crosmos.nes.aau.at
www.aau.at
vcs-isbi.aau.at

Certificate

The complete raw certificate details for eeo.aau.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432632844287712550990084545508966825239175
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-23 01:38:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-22 01:38:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eeo.aau.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 930690438423450219882525513063826876561776025954827371098587372424140757567429408805294150010477272850345577965795683772417928372560925432339195692137972426684442694565954473474269851191348576969904604581413820650182495918854982371810616542772866479334852291669560517058750022603625158333963607963783021368396104834329350449061011850955818016948944894066012311801301129732567881272049854507143350411455486570594653403278245111904669129181845201463177389495396677074789464146763516929958554797529067187584065497774007316399835852781396335772721431752950779887292992462095406378963731305751268634323159272443276750761988414120463363216617199362040048871857362046358911103400198766708821368250058245971492492988659701747477994612913443506974665738076920442810774573910525815626301391194092957309471164159050775877078673076055239214297992885523543404172295233876789196684138413147814822430670170611903270771208786581421279901364586150984105044336512399505816558162484935688579175035644551748846362236435069167529408447089178386275798299867664216743772897046243663992483956688086183041499637555388418056594465395755257385054565108258655155062514030049170239779114925019528064354195615682902225136137724139718703934112661272349023267481591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e0d8f3088e97bd46b40f42ebcbce0ac654d64fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eeo.aau.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eeo.uni-klu.ac.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eeo.aau.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d5bfc6edd000004030048304602210087633d81288c05a3b3f89ac0bfa5a2256c663e42d29a533eab400e4deb4a50360221009612cc2262258f3b16c20aaa0e62439516212c0b9c8d0073f9b55968ab19c208007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d5bfc6eb9000004030048304602210086bef72f3efb6a2adec3e163dfdada8b2e79d52e4dd1b12bf8d3bb9a9f8af320022100f12ae162d4f5752a791a24fa5f895dc857c3a3a7db6546a8c8520c1fab493eb7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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