nes.aau.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1c:7c:56:86:b2:fc:27:9a:7b:b3:cf:67:7d:0f:8a:fc:ec was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nes.aau.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1c:7c:56:86:b2:fc:27:9a:7b:b3:cf:67:7d:0f:8a:fc:ec
Serial Number (int): 358142323541857965043857390116249623264492
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4e:85:b3:31:7d:73:00:7e:d1:0d:ce:58:b6:98:6d:1e:22:3d:d3:ed
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:fb:48:a7:d9:87:7c:a2:c9:7d:ec:4e:03:a1:46:c7:e0:df:93:7a
Fingerprint (sha256): 3b:7c:78:3a:25:1a:fa:1d:a6:3b:a9:cf:43:08:93:58:55:d6:78:a0:6e:01:00:57:0a:48:72:85:5d:f9:df:c1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nes.aau.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nes.aau.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nes.aau.at
nes.uni-klu.ac.at

Other certificates including the domain name aau.at

(limited to 100 certificates)
studdorf.aau.at
clouare.aau.at
shib.aau.at
campus-gis.aau.at
scs-iwas.aau.at
qualitative-content-analysis.aau.at
elearning.aau.at
lab-iid.aau.at
dx-workshop.org
seafile.aau.at
survey-test.aau.at
web-ainf.aau.at
dx-workshop.org
survey.aau.at
ae-ainf.aau.at
seafile.aau.at
pervasive.aau.at
www.stat.aau.at
swilt.aau.at
jobs.aau.at
www.itec.aau.at
ub.aau.at
mobile.aau.at
scs-iwas.aau.at
kiss.aau.at
uniclub.aau.at
lab-iid.aau.at
elearning.aau.at
uniclub.aau.at
narrativeencounters.aau.at
rooms.nes.aau.at
lids.aau.at
doku-inf.aau.at
narrativeencounters.aau.at
ameise.aau.at
icn.itec.aau.at
moodle.aau.at
campusplan.aau.at
newsletter.uniclub.aau.at
scs-iwas.aau.at
bscw.aau.at
wiki.nes.aau.at
dia-2018.aau.at
pfl.aau.at
trusteye.nes.aau.at
informatikwerkstatt.aau.at
vulnscan.zid.aau.at
mailbox.itec.aau.at
pfl.aau.at
tomwinkler.nes.aau.at
svn-itec.aau.at
data.aau.at
ius2.aau.at
sepse-iid.aau.at
www-app1.aau.at
www.aau.at
tech.nes.aau.at
moodle-standby.aau.at
kcgl.aau.at
kindergruppe.aau.at
crowdmeteodata.aau.at
data.aau.at
video.aau.at
apollon.aau.at
lab-iid.aau.at
aau.at
kiss.aau.at
darwin-isys.aau.at
ius.aau.at
indy.nes.aau.at
codex-management.aau.at
litkult1920er.aau.at
trusteye.nes.aau.at
wiki-ainf.aau.at
mmsys2016.itec.aau.at
ahesn.aau.at
informatik-spl.aau.at
me-sci.aau.at
crosmos.nes.aau.at
dia-2018.aau.at
saner.aau.at
uniclub.aau.at
spiderino.nes.aau.at
doku-inf.aau.at
ide.aau.at
tewiki.uni-klu.ac.at
mc40.aau.at
usionline.aau.at
ius.aau.at
survey.aau.at
mooshak.nes.aau.at
www-php1.aau.at
blog.tewi.aau.at
sauron.aau.at
tomwinkler.nes.aau.at
www.edu.aau.at
aesn-api.aau.at
bbb.aau.at
crosmos.nes.aau.at
www.aau.at

Certificate

The complete raw certificate details for nes.aau.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358142323541857965043857390116249623264492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-07 06:45:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-06 06:45:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nes.aau.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 859333972887347275470494376519391091205121211215113783184750683383577480848540461061030906847353532366585008811801581924429733249405459588387594805538705170974981287332058837725186976603498110961660081354223960633983369159868712677163390272297484750599201188395403529213318784623574849874201821879668634584450742779944484870803116775115236456519766343765946420001033662370917387925954531772459702144570032725472701848681782565843684444309256406595365158314779569725302035855637073999975994389205647201133028187688862350493595583300216540095132743303794879298541723289822350200205578386842896143730280860220978194026001491977313235958889973520375705432349556046980024148038840898127703199501184543821879970166366130150829025784876111272402436098794332198610972630145796616963366295534554492293509670684668361049370465101091311787590312003512770938902387412296471163265890306072022854069966504656117875278296635059602079718588978142050735994906906922290479754359623768877121919298559631653691261733645641616707117281407413294394964194923460749967673895314789566658103142831192546416412844580317216695595296517091268953314551621100314038065708228956712015256531674188962476953867295365402523363620010817059869312943899556741950934283431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e85b3317d73007ed10dce58b6986d1e223dd3ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nes.aau.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nes.uni-klu.ac.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d0aaefa49000004030046304402202976de06a79eccf29dd42a1875cd76c029aad7a7df8e0cc775c68ea714d1cc8002206ae61aea9b73457e7909f87ed82c921fba4a01016b425cc2665a6c9cb2909af2007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d0aaefc3d000004030046304402200494d9ca5d07155f099131865e36742a027fcd583778c629efc496f26abe3a2002207305c99233d76c973d0d66f79dddcaa57d7052d911c15e09fb30087ef4c0f329
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002b2f61bbdb1881ca1c6aadfb31e91198c6e4e854578bbdc78becdf09dad79c34e032f1ec5442ba5037c8dfeaddf9e4699c8a34cfa931490535bf13e6bee7a3c16e029c18a3f2db0f71db8d9d1a4b6bac6d3bc98bce19b4a0d67ca1f7d071fb856550576777e9e362cd92e884d95594f8a57efa7934b8913b456c8c34a83e445805bb098de72d65010e55093299e92335505663c31d4d4ba4983428e4851a77f94be79e7da852fa0619731f4dbd8e49c4587c6282ec96d51aa4308370e3b0cc8d225a5625736619b901e2713525463500014d088c7d6258189477929ce30dde6ac23cd476bf2edb513aba8579ba420ef779265efb8cf764ffa8b2ad6b61c2d268