wiki.ercim.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:93:d2:74:6b:49:19:b1:b3:68:58:9c:a3:df:08:89:72:8e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wiki.ercim.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:93:d2:74:6b:49:19:b1:b3:68:58:9c:a3:df:08:89:72:8e
Serial Number (int): 311638108094218551848916559218949921272462
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: af:02:97:b9:57:91:9b:7a:b2:13:9a:fa:93:a1:c0:e7:59:b6:bf:55
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 00:63:68:e3:1c:3e:45:de:8a:93:f5:38:72:27:94:9e:b1:bb:4a:45
Fingerprint (sha256): 2b:55:ab:29:62:66:a5:d7:47:27:1f:61:81:ae:20:50:28:33:4d:cc:26:ea:e3:12:a5:91:0c:21:20:af:db:7b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate wiki.ercim.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wiki.ercim.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wiki.ercim.eu

Other certificates including the domain name ercim.eu

(limited to 100 certificates)
eficst.ercim.eu
bscw.ercim.eu
bscw.ercim.eu
webmail.sophia.ercim.eu
webmail.sophia.ercim.eu
ercim-news.ercim.eu
www.ercim.eu
wiki.ercim.eu
strews.ercim.eu
paasage.ercim.eu
ercim-news.ercim.eu
paasage.ercim.eu
strews.ercim.eu
fellowship.ercim.eu
www.ercim.eu
openmediaweb.ercim.eu
paasage.ercim.eu
wiki.ercim.eu
paasage.ercim.eu
trac.ercim.eu
webmail.sophia.ercim.eu
svn.ercim.eu
bscw.ercim.eu
trac.ercim.eu
webmail.sophia.ercim.eu
gitlab.ercim.eu
eficst.ercim.eu
strews.ercim.eu
ercim.eu
easyts-egi-old.ercim.eu
svn.ercim.eu
ercim-news.ercim.eu
svn.ercim.eu
lists.ercim.eu
eficst.ercim.eu
bscw.ercim.eu
ercim-news.ercim.eu
trac.ercim.eu
trac.ercim.eu
wiki.ercim.eu
fellowship.ercim.eu
easyts-egi-test.ercim.eu
webmail.sophia.ercim.eu
fellowship.ercim.eu
ercim-news.ercim.eu
fellowship.ercim.eu
bscw.ercim.eu
stats.ercim.eu
www.ercim.eu
bscw.ercim.eu
svn.ercim.eu
eficst.ercim.eu
lists.ercim.eu
bscw.ercim.eu
paasage.ercim.eu
wiki.ercim.eu
strews.ercim.eu
vre4eic.ercim.eu
stats.ercim.eu
stats.ercim.eu
easyts-test.ercim.eu
easyts-egi-old.ercim.eu
trac.ercim.eu
bscw.ercim.eu
www.ercim.eu
ercim.eu
stats.ercim.eu
lists.ercim.eu
wiki.ercim.eu
trac.ercim.eu
svn.ercim.eu
trac.ercim.eu
paasage.ercim.eu
strews.ercim.eu
fellowship.ercim.eu
lists.ercim.eu
paasage.ercim.eu
fellowship.ercim.eu
paasage.ercim.eu
strews.ercim.eu
svn.ercim.eu
lists.ercim.eu
www.ercim.eu
ercim-news.ercim.eu
eficst.ercim.eu
strews.ercim.eu
strews.ercim.eu
ercim.eu
lists.ercim.eu
webmail.sophia.ercim.eu
*.ercim.eu
lists.ercim.eu
wiki.ercim.eu
easyts-egi.ercim.eu
lists.ercim.eu
wiki.ercim.eu
stats.ercim.eu
trac.ercim.eu
www.ercim.eu
fellowship.ercim.eu

Certificate

The complete raw certificate details for wiki.ercim.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311638108094218551848916559218949921272462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-14 18:21:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-12 18:21:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wiki.ercim.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779514169646708324064538577326459264155937698801869179249067817194330473752975681765755657621613168230413637981786665611858193120370905828735609091452685933133074946081253652640321642762743400425748166405749586526678703979537482857480184983688449484041762216382257503154398956114366009470720731649428185972438583815196996704615337995929168901891929004487506919986386858302572021057584562178067574337025678797396876722191678143138022606215745000216247905264659699405727198183802013427279088024310429361556393869808556452775481799258397902830562617199917553885136813899816222309566395978519970323649254607716849657783971619044467139088338919138019604669691602019521894214249258363735826502270819410087169228745225230422877508948906926186809490373591487455726186729733224422647971819846393571262930403152874433201580774164840345711834122773870523580737140152318126134043140149895308191701851702908501877297049508189235982228961277609847757370013359220011570891925888321075716672614429463497219609625147555434710636041471296286374501730311969409657595787637812732908889024407572063845750711514452610403723677222098829661535609834815854939319367642923594590874148558810231807312116552979683357178927432350702667432245051247748275125445659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af0297b957919b7ab2139afa93a1c0e759b6bf55
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.ercim.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dcbb80aee0000040300473045022100af53d23b5926002aace365c2d83717c0c5a7860870013676dd27861a8f64154802206fcf769d76903cd4d8367c5a62b42838d97c57b10a7470f0c4b274160e7bbde1007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dcbb80b0b0000040300463044022000f603ae6bb800b158e98cd272e75fc70d33163e82c2682767e001cbdf425dbc022042a2ee9d030f9f47a3a40fc8fb5ea7495d27db4422c71e7b7b6c7c24ece1917d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006f52f9521f394ad02571f11f22b76dd82afa012947b8168cab5dbc5fa7db80be69cdd422f1e8c932c3c93f86628327ffdc18cd9feae097ed0bf77f2787fff783b9b7e4dedd4098f4c252404ab9969244a0afc4fb853ddc3272568e9c8a114ffd7328db7d54b93cbcd46f6295930539a6c8182d3e63bd175edfbd3e0685f1aeba733b1a8efe2860c2f31dca0191aebb03f661b703de27b3f13673b4eb73ae841246d881ee2028af040ed0ef17bf09c6990c48fe7e892a6cb3a9ff70db8cbdc8f9bdd0cc9eaf1dd5c2286a92aae9d9cfda73eea92c16e412cc7a3d947bcee49918eeae0bde1aae5af9206611ff1b2449431c91540c25ae42d6cf45e48000fd8ff4