stats.marum.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:79:8b:20:1a:b8:c0:8a:58:0c:59:5d:ae:c4:ac:c5:cc:22 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stats.marum.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:79:8b:20:1a:b8:c0:8a:58:0c:59:5d:ae:c4:ac:c5:cc:22
Serial Number (int): 302695953579608090406770693292580569205794
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:40:31:5e:40:15:90:e0:45:5c:7f:f5:72:87:22:33:38:8b:c8:5e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9e:c8:c8:d7:d7:da:6d:2e:87:1c:21:b4:fd:5a:bc:7c:30:02:64:04
Fingerprint (sha256): 3a:d3:93:80:51:a3:4b:29:48:f2:29:12:fd:33:d0:89:78:41:24:8c:2b:03:c9:c1:52:bc:6d:da:30:7e:1f:da

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stats.marum.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stats.marum.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stats.marum.de

Other certificates including the domain name marum.de

(limited to 100 certificates)
maps.marum.de
gdfbmapserver.marum.de
cloud.marum.de
idmdev.marum.de
www.marum.de
pangaea-mw2.marum.de
paloz.marum.de
stats.marum.de
pushmail.marum.de
git.marum.de
geoserv1.marum.de
ds.it.int.marum.de
stats.marum.de
logistik.marum.de
lists.marum.de
mail1.marum.de
zer0.de
logistik.marum.de
pangaea-mw2.marum.de
schlammspritzer.marum.de
mail1.marum.de
www.marum.de
stats.marum.de
logistik.marum.de
paloz.marum.de
groupware2.marum.de
idmdev.marum.de
drabo.marum.de
stats.marum.de
waveglider.marum.de
mx1.marum.de
paloz.marum.de
drabo.marum.de
waveglider.marum.de
drabo.marum.de
pangaea-mw2.marum.de
stats.marum.de
groupware.marum.de
publications.marum.de
connect2.marum.de
publications.marum.de
pangaea-mw2.marum.de
paloz.marum.de
vpn2.marum.de
logistik.marum.de
schlammspritzer.marum.de
schlammspritzer.marum.de
waveglider.marum.de
zer0.de
marum.de
apps.dmz.marum.de
paloz.marum.de
www.schlammspritzer.marum.de
rt.marum.de
geoserv2.marum.de
geoserv1.marum.de
cloud.marum.de
zer0.de
stats.marum.de
schlammspritzer.marum.de
paloz.marum.de
paloz.marum.de
waveglider.marum.de
www.schlammspritzer.marum.de
connect2.marum.de
logistik.marum.de
pangaea-pm.marum.de
stats.marum.de
idmdev.marum.de
geoserv2.marum.de
stats.marum.de
geoserv1.marum.de
pangaea-pm.marum.de
logistik.marum.de
pangaea-mw2.marum.de
waveglider.marum.de
zer0.de
blog.marum.de
stats.marum.de
matter.palmod.uni-bremen.de
pangaea-pm.marum.de
logistik.marum.de
maps.marum.de
drabo.marum.de
nasiodp.marum.de
mail1.marum.de
idmdev.marum.de
cloud.marum.de
waveglider.marum.de
logistik.marum.de
stats.marum.de
waveglider.marum.de
apps.dmz.marum.de
pangaea-pm.marum.de
paloz.marum.de
nasiodp.marum.de
groupware.marum.de
schlammspritzer.marum.de
mgmt.marum.de
drabo.marum.de

Certificate

The complete raw certificate details for stats.marum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvwjTRJaCnpL4Y5yaLFmk
Lli31AaPahKMCbZg3zY7qiCQ9ticJKaPeAPFXZDqdzvQ4DmBge6Sjvetm4eIySEN
S1+NGsQ9dEaffOh6UavOjEGaTdoBDvT9FzR5hQs9VhiKOXEbG1J3Yq/6khImmlR/
Z4ReDe/PXZD5+fvM9ToD18VneOArPHBR7F54Xhfcr0lHn0WMFAU7yw2z7RCNp5NF
PkaZz4CfOQ1UDgjqVMqtEPldLlGxLMZYg9A04h5xK91PO/VruXNvhN97ZkbRUCDH
yW7HjwCYTzciGGyrpY23buRQZaFcw1pXFKXELPQaubCUi8nrEvEDdAF+PCg4tXtE
pdg5TNoAYAsk6pu/6KiuUqm+Gj7TNsqfvQy4rBwZA6NKgd9f4mnLwoKkbIUmxI4a
Q/z4DTsrw/qG2s8hCrzK3alTPkdjZcEjpnJIyRTWOHNr9MkRz19AiI/+jNlfgVGL
/lWAVWV4fWi/fdwLbH3Hy++bKw6rep9XQlzpflaeXOlWZlGkvwYnarn6DompkusX
j46P2pGP0xvw5SuBaO7YtrPpfbN5B/iY7jx1W59r2QyOztudxRTN9YmbGYegGkls
0jc9tIza/EXq4yRRMpqom99CH6bbKyEX6ce35Mv6EDhR3Uijz70VutSsUHktPwN+
de0ABt5HkVQPNbiofnR/LC8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302695953579608090406770693292580569205794
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 09:05:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-10 09:05:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stats.marum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779352657387572394016694464489889837670847384141141908998264466320853698424497109006047337459829942964293429365526495209962894279161624202785365147097755567647224793361853599160514095913737368759806220170024715264728009591117350107776936735906837886321570166510147931606731036057125197628619438612620056852661285322909985612332270041851240754948789248118120908883155597530982533610492458165329710707365566696247957075971530716221614196338251127110434677183648573418019167875382243927024801441062173709738143665858693460201603022347580580390406796644891196385035176200752903022423112732045766584892667851476886797469114160991406225245884116772338885920490523081235697985599890941043705226113551382768917207582573267336473268886360129089988508314869178980107101561661698541433635914434702865285257259931154088071983681807076057895284859772242827100554469399984511661546175327077419827273302522068195280399166913537301948551856454379041240769036055680974382815858686175280121672628635556668786035160410565677145492196218220186226309657032685085543265324943671262741401574466496227488921538080721622978758684012535042551705724590177331364521104922186684549051800395498154908521502291991897672916088133860590548032401798351134178100063279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b40315e401590e0455c7ff572872233388bc85e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.marum.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170ce348691000004030047304502202c8fccda0010317c5af0004555a7e30c7f8681bf4fc9d513046ae1b460c6d7d9022100c65be61645e65e21d61f67ab0b5f6bf083c8b75f79cdc25833e9882f2a93a8a3007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170ce34868e0000040300473045022100e11b132dd343d681c49452f2bb06009010016b8cd7bafba0ece7c28b9a87003c02201b783e4980743b70a4293442e7f86c92b8cc2e215a1d4c87a22ca1405cfc19cd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005390bece4c5c87bd9f8b4002f26c8e985512f9fa12ee8a1be545bd110f982bf9e13c1ad04d408081cca067de4cce2ffcdd2198eb434ddc8422343d8ddd6f6c1ed07fc7c916359b9516e9c2f8d94806ec40024c92dfa7ecfaea82d8ad2145fc1d2a989e736eb394315f3c45b3ae61f0e97d8870499552eaf67469b3300e1ccb8c9b8267a392ac1391c79b430bcd7c9fce88961e44137324277344435ee651c98bbedc0f7725f3a2d45dddf17180c2a1eb4875319337f78446399dc3d00c05a2f78c7d2a0cc37777707f647a7dc393a9afac539a82cfa0ba1ade57162e8d4b937009c6062284d3636ae6443c68200439c006166763cc84a5bc4df7d2acc65db8f9