www.cost-jet.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a7:12:27:2c:86:33:0b:a6:ef:a3:cf:3f:4b:4c:e9:48:d9 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cost-jet.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a7:12:27:2c:86:33:0b:a6:ef:a3:cf:3f:4b:4c:e9:48:d9
Serial Number (int): 318188142577637468841848275128503690152153
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a7:0d:ae:65:5a:2e:87:bf:27:5e:b6:6d:21:eb:89:90:22:76:5e:96
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ae:75:79:b9:0f:27:80:f8:35:ed:e3:ca:e6:e8:41:e9:d1:4d:69:b7
Fingerprint (sha256): 2c:f5:41:24:a9:03:82:f2:5f:ea:c0:e1:e9:65:73:60:da:90:11:07:ad:dd:a0:f4:90:26:cd:03:9e:75:d6:1e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cost-jet.eu

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cost-jet.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cosmic-shear2020.rub.de
frontiers2019.rub.de
japanplasmadays.rub.de
pt20.rub.de
rdpci.rub.de
rdpci.ruhr-uni-bochum.de
rdpcidat.rub.de
rdpcidat.ruhr-uni-bochum.de
rdplasma.rub.de
sfb1316.rub.de
www.cost-jet.eu
www.ep2.rub.de
www.ep2.ruhr-uni-bochum.de
www.ispc-conference.org
www.plasma-school.org

Other certificates including the domain name cost-jet.eu

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.cost-jet.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkzDY+l/k32ENd+sK09N
AcLfzIGEjjC7TNt47HFp+R7M59z5vWOmaom12cgml6ZOZQ6hCLpzjsVgVC5xmeBO
j+4Ho2MS+CTM6RmAVVZNuyeXZ15nI7HsBNdAtv4WRR0tRuSc1ujrF/2HpBsAhImp
96QHhpA/i07tb0HT1ddN1/uopwLcYtoGj9VT8ZFu3A1etevl8Qn20XSf/QA3R5s+
6DEnHMBvU+1fqBLEnK1Q8mR5obn1jQDVtDfu9uTNwsCJV7TRt9aZRCiAY+xyJv8Q
uIm2Ynfd2aM8P/YA2UOrgmcGZJUxnz1+BfwHXSTLQ+K9+BPVj5ZAxSHLNSqXKvlN
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318188142577637468841848275128503690152153
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 12:18:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-02 12:18:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cost-jet.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25033037749359047875505277283480275116668029549983718947097664065384811268309259042373302536816306492839839779004985968769491917198157220200707139484162184570730661787895620453369834380192133040462241998051745679632031996491472612455198255116843414170303107880876977732401963661856552306246771299250360789637737487684906543037780035755017019229275875113808462514189404940173428218297878133911236816461357254137659744144721612769928404749657106536787742743940074174988540834961686277987072988708159210348534831066606363433845821211462567398735407483803701822060654890874949270414270640346673029508142763432459374251387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a70dae655a2e87bf275eb66d21eb899022765e96
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (316 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmic-shear2020.rub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontiers2019.rub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japanplasmadays.rub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt20.rub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdpci.rub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdpci.ruhr-uni-bochum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdpcidat.rub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdpcidat.ruhr-uni-bochum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdplasma.rub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfb1316.rub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cost-jet.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ep2.rub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ep2.ruhr-uni-bochum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ispc-conference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plasma-school.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170060db0bd0000040300473045022015252725f2e7cdd487b44613bf729ea31c64dc7d57b5fb9ae78b45cadc7e465802210099ea870100b4c5aff5e1253c7574387fe28967908572d6ace6f1eb8271558d3400760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170060db0ed000004030047304502200cf58f79e92a182afc2368e7885475842365dd3945aa55e8f05cd535ac7946c6022100c0f2c5556154a61487d29127c4728e76d27e158f666d1a0d9f12e5da437284fa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002ed35bdf91968d981fe2c7ab6996c36a569346426347af722117e0314925e0b4eadf7cc3fdc027af8fd9ece3f30bcce408ff1fa9ee5e9799025bae1dde2cc0d5dd8a44790dd079a6e678f6833355583b88fe86d3450669b22b6b93efad317a713062e6bf9a5f9ca9eabacc2ccfff248c788f24109c13433562b258eec42c1eb2f8dbb61a05739ac86b355538536a5b189e4b5be21ba6204857212fc4746040b9ede40d1d6d840488209a6dc2d607a7e2bc84e2b435dda2cbbc2c7536f8d584fceff4db7549694d1a33d188f3bec710d2a25bf915211b5e74066d0c7217f15e9e246f4f95e4b1714af90e9d9adfd754fb76ad899567548758d79b6376adb8cb72