ilias.uk-koeln.de

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 83:53:5f:0b:92:1c:ed:49:1b:d3:27:5d:79:e0:bc:0b was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ilias.uk-koeln.de

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 83:53:5f:0b:92:1c:ed:49:1b:d3:27:5d:79:e0:bc:0b
Serial Number (int): 174561755832724286515504081288868969483
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 41:04:dc:73:db:71:13:f5:c1:70:06:3e:af:c6:2b:d9:35:d3:a6:ab
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 19:8f:c4:bb:02:49:74:aa:9a:22:54:0e:0f:58:79:a0:e9:23:ef:9b
Fingerprint (sha256): 37:5e:f4:b6:22:8b:d6:a5:00:b0:56:84:0f:03:63:0e:bc:87:59:58:5b:04:dd:6c:28:4d:f5:5f:f2:86:b6:8d

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate ilias.uk-koeln.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ilias.uk-koeln.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ilias.uk-koeln.de
test-ilias.uk-koeln.de

Other certificates including the domain name uk-koeln.de

(limited to 100 certificates)
arztportal.uk-koeln.de
arztportal.uk-koeln.de
itserviceportal.uk-koeln.de
itserviceportal.uk-koeln.de
sapportal-dev.uk-koeln.de
srm-qs.uk-koeln.de
smtp.uk-koeln.de
dwa.uk-koeln.de
l-medic-vonk-p.vm.uk-koeln.de
srm-qs.uk-koeln.de
qlm-infoboard.uk-koeln.de
hcm-dev.uk-koeln.de
srm-dev.uk-koeln.de
radar.uk-koeln.de
*.uk-koeln.de
ish-dev.uk-koeln.de
*.uk-koeln.de
vpnukk.uk-koeln.de
srm-qs.uk-koeln.de
cag-extern.uk-koeln.de
owa.uk-koeln.de
srm.uk-koeln.de
grc-dev.uk-koeln.de
owa.uk-koeln.de
srv-dcllsg.uk-koeln.de
speechlbnms.ads.uk-koeln.de
ilias.uk-koeln.de
cag.uk-koeln.de
iam.uk-koeln.de
speechlbnms.ads.uk-koeln.de
webexadmin.uk-koeln.de
*.uk-koeln.de
webexmeetings.uk-koeln.de
ilias.uk-koeln.de
corona.uk-koeln.de
ish-qs.uk-koeln.de
smtp2.uk-koeln.de
radar.uk-koeln.de
sectravna.uk-koeln.de
abbuch.uk-koeln.de
cag-extern2.uk-koeln.de
l-medic-vonk-p.vm.uk-koeln.de
ukk.uk-koeln.de
cag-extern.uk-koeln.de
arztportal.uk-koeln.de
l-nngm-app.vm.uk-koeln.de
vpnukk.uk-koeln.de
webexadmin.uk-koeln.de
ish-qs.uk-koeln.de
gitlab-t.uk-koeln.de
ish-dev.uk-koeln.de
*.net.uk-koeln.de
owa.uk-koeln.de
fu.uk-koeln.de
pmv.uk-koeln.de
srm.uk-koeln.de
w-osr-dms06.ads.uk-koeln.de
verinice.uk-koeln.de
dwa.uk-koeln.de
sapportal-qs.uk-koeln.de
abbuch-t.uk-koeln.de
webstatistik.uk-koeln.de
grc-qs.uk-koeln.de
processmining.uk-koeln.de
grc-dev.uk-koeln.de
owa.uk-koeln.de
grc-dev.uk-koeln.de
hrtbt-patientenportal.uk-koeln.de
owa.uk-koeln.de
ilias.uk-koeln.de
dl-medic-prxsecfw-t.dmz4.uk-koeln.de
cag-extern.uk-koeln.de
cag-extern.uk-koeln.de
*.uk-koeln.de
corona-impfung.uk-koeln.de
arztportal.uk-koeln.de
ilias.uk-koeln.de
dl-medic-prxsecfw-t.dmz4.uk-koeln.de
speechlbnms.ads.uk-koeln.de
speechlbdms.ads.uk-koeln.de
cag.uk-koeln.de
srm.uk-koeln.de
dwa.uk-koeln.de
srm.uk-koeln.de
speechlbdms.ads.uk-koeln.de
EXP-C-MRA01.voice.uk-koeln.de
intranet-stage.uk-koeln.de
ukkrad03.net.uk-koeln.de
radar.uk-koeln.de
hrtbt-patientenportal.uk-koeln.de
EXP-C-MRA01.voice.uk-koeln.de
radar.uk-koeln.de
ukk-aktuell.uk-koeln.de
iam.uk-koeln.de
prime.uk-koeln.de
speechlbnms.ads.uk-koeln.de
EXP-E-MRA01.uk-koeln.de
hnc-cms.uk-koeln.de
hcm-dev.uk-koeln.de
srv-dcllsg.uk-koeln.de

Certificate

The complete raw certificate details for ilias.uk-koeln.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 174561755832724286515504081288868969483
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ilias.uk-koeln.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 748346111115565696231574916893859738661253887538979929823799723268005296393185577181382348548849627297933594676289963743824222397318441056109444681279270116283984783421527861913445900508860516006533422492753437385846628935547364257617622300424078046736959596476051345353486659971973003811217741905553393122248429476174417073110246863550599278560414987195388811742933585598214124576152227310445340581626784590540930206044667341526044832379781772933591105025953603602718738600276121039222510929810847587979144736773606811739820341033719235479616205799010840383538978361388667509366351943054320945553088078382934851305724852728200032745877169447879022054435083349356287952419298151304074927915727169616258722037285236218801777614003545504952729256406189568073189514461654906083108190991215503633429174545197679083104189600783007983428098323289396450507780818459784246282737514642140597723096994112788629219093872878464660329771996428482550654778692330994742898649344421794424725297514341062730702760377251457325303824679246191516805301479863697810877894477821446411628028551135938468490117845549842066516060484430566263111192560844117724424253014957726223917531903374401993833534585222728046621968643576096671449427100441268187517796051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4104dc73db7113f5c170063eafc62bd935d3a6ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilias.uk-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ilias.uk-koeln.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b4dcdfbd95b27785cc046d046107b52de475f3a46934de72e5fa5b605b243063547073c1fd058bce788c66a93f204e95f94fcb1eab718c3d1e93bb938f5d54f525bfcb3556aa419bbb7f36808c2f9f93c4eb30c3691de7502ed4434c01e1fe466808aaf3d00125b8f20fbf595da5a6aa82f051a62d06f30506275b76b63c672af36bd591d378a2e68962289c469866ecc6359783ede515cdb80bc809c1a0d4731b126f8ad49272970d6f48968133bfeee9ce7ffdc7bbc06e6449bbb9630177fd2f1d76643faf91ffe65ba26e8f8924237195bf85ab50d2062beabec798e81ae59b7f44834e9f4eedc94c96d8ddb1e54a10a2b35e8aecbdfe4953049059f2394f