m.tud.stellenticket.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:53:58:39:5d:6f:0f:f4:10:73:d2:ef:5f:b1:44:61:ec:25 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=m.tud.stellenticket.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:58:39:5d:6f:0f:f4:10:73:d2:ef:5f:b1:44:61:ec:25
Serial Number (int): 289697564169331997998752587996430713613349
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:64:c6:44:1a:12:b3:3a:6a:08:78:a6:13:fe:73:c7:85:80:dc:35
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a1:35:e1:e9:3d:b5:fe:9a:1d:f2:80:8c:ce:4c:f0:f7:04:f2:29:09
Fingerprint (sha256): 39:ca:31:da:bb:3b:9d:1b:3d:1d:e1:80:c6:34:98:ab:a7:40:d6:37:c0:71:99:fd:0b:0b:0c:c6:51:48:72:3c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate m.tud.stellenticket.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for m.tud.stellenticket.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

m.tud.stellenticket.de

Other certificates including the domain name stellenticket.de

(limited to 100 certificates)
office.stellenticket.de
lea.stellenticket.de
hulk.stellenticket.de
leosachsen.stellenticket.de
wiwiberlin.stellenticket.de
hu-berlin.stellenticket.de
wiki.congeno.stellenticket.de
silicon-saxony.stellenticket.de
begruendet.stellenticket.de
begruendet.stellenticket.de
tub.stellenticket.de
*.markus.stellenticket.de
m.begruendet.stellenticket.de
silicon-saxony.stellenticket.de
m.hu-berlin.stellenticket.de
cfe.stellenticket.de
biosaxony.stellenticket.de
conf.stellenticket.de
leosachsen.stellenticket.de
hu-berlin.stellenticket.de
demo.stellenticket.de
lea.stellenticket.de
tub.stellenticket.de
begruendet.stellenticket.de
m.th-wildau.stellenticket.de
leosachsen.stellenticket.de
hulk.stellenticket.de
piwik.stellenticket.de
api.stellenticket.de
m.tud.stellenticket.de
zen.stellenticket.de
stellenticket.de
tub.stellenticket.de
lea.stellenticket.de
piwik.stellenticket.de
markus.stellenticket.de
tub-vak.sp.stellenticket.de
api.stellenticket.de
wiwiberlin.stellenticket.de
tud.stellenticket.de
hulk.stellenticket.de
cfe.stellenticket.de
stellenticket.de
m.tub.stellenticket.de
staging.stellenticket.de
th-wildau.stellenticket.de
hulk.stellenticket.de
caseman.staging.stellenticket.de
begruendet.stellenticket.de
leosachsen.stellenticket.de
m.tub.stellenticket.de
m.leosachsen.stellenticket.de
hulk.stellenticket.de
th-wildau.stellenticket.de
m.tud.stellenticket.de
m.hu-berlin.stellenticket.de
stellenticket.de
conf.stellenticket.de
tub.stellenticket.de
auth.cloud.stellenticket.de
begruendet.stellenticket.de
piwik.stellenticket.de
m.begruendet.stellenticket.de
hu-berlin.stellenticket.de
cfe.stellenticket.de
m.silicon-saxony.stellenticket.de
leosachsen.stellenticket.de
silicon-saxony.stellenticket.de
lea.stellenticket.de
tud.stellenticket.de
*.markus.stellenticket.de
piwik.stellenticket.de
cfe.stellenticket.de
api.stellenticket.de
tud.stellenticket.de
caseman.staging.stellenticket.de
cloud.stellenticket.de
cfe.stellenticket.de
lea.stellenticket.de
wiwiberlin.stellenticket.de
hulk.stellenticket.de
hu-berlin.stellenticket.de
m.hu-berlin.stellenticket.de
tub.stellenticket.de
begruendet.stellenticket.de
hu-berlin.stellenticket.de
silicon-saxony.stellenticket.de
m.tub.stellenticket.de
demo.stellenticket.de
wiwiberlin.stellenticket.de
tub-bzhl.congeno.stellenticket.de
tud.stellenticket.de
silicon-saxony.stellenticket.de
m.th-wildau.stellenticket.de
congeno.stellenticket.de
lea.stellenticket.de
zen.stellenticket.de
trainings.europa-uni.stellenticket.de
hulk.stellenticket.de
m.tud.stellenticket.de

Certificate

The complete raw certificate details for m.tud.stellenticket.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289697564169331997998752587996430713613349
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-31 16:19:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-29 16:19:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'm.tud.stellenticket.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849795327106094854707712117026708075183469958830414976642436255148262039893415666659909340438448344015360686125742266822832711644505223552402476774850532472380820327166335390418265954584916908573964994628157190457295829321603589661582358805510982756788876989985878471249948890006369299962506445190780587834372977554557139721243954869617737978846147801584949552439946858588422918146367400328960983246108254780067858189025477417536603764985426304351473409815667191064636831774107170178862164947490694525723478774861610062398443729821835753589951119214671521180919666590677501400515251213810243669801408819468404389969480978314151752816761633276155107035339710465834603123076338993999827104809078787644040908760250700372783322336114132206714192078300025213697510714836618173618657268499162178464611414024507252412402929873988604861622882063335765967018753508415877809657701665234971817487099032639573520964676228107876107200510461279285795015827064921066246838279825562498024721576016681912424103156600114338937662887109788471786452875141036595874400874180272370628236689666465685829431225286611131594595767067609765120675438660329003171337638984151361360236662275653628406629997622287833129724132313004661316078837282450905365880632189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c64c6441a12b33a6a0878a613fe73c78580dc35
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tud.stellenticket.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169d4c30642000004030046304402206377a8df2baa03bdf1a6975df1c405cb43dcf6d662c6c82b63d1139e18e5b999022054662ea0e0640496ce74ed3b7d8949b7ef0d32430c9ba35265ff3dfa5b02c49900770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169d4c308af0000040300483046022100c58565c7498e35ce5e01b31f864bace09ae119812db04ef08b0003c72b4361a80221008807565f2cd989477fcf09d317a226414f376614ec7f2f1aae2409d30a4d40f0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00904c1c69bdbcf8250cb6bcc39bd57ac05d6490c755aca1124c5bfce49d4e314fad110c80cb5a02ea65d0c669f94b463797413d03969be74ad622a2391824fa2877b9056d7b6314675d2c927670ca9c9095245797a5d998a78fb937a648d2ac28aa4acece7ceb832767e04dd0e840f05e018a4fb6b5aadc1ff51229644ffa50846e6d270820be38cd5fa77e39845a70a5516f086b396cb30ccc7e85a88238ed95c4fdedd77d4d59e3577f85eb5aeb90905b2b0da6f82ee7b75ae3c12ff2ab06b282ad0f96612491035e2664872556784c4385e28feffea7207395b9d003dcffda4de9932f4984434e6c39f7a2ba5601cd67af139c39e3ff06120fab5d43125848