news.tib.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d5:d4:a8:cb:c7:bc:ab:ef:88:55:41:53:87:da:1a:34:9c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=news.tib.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d5:d4:a8:cb:c7:bc:ab:ef:88:55:41:53:87:da:1a:34:9c
Serial Number (int): 334099674723573213594617446210723108238492
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ae:f2:86:3a:48:2c:6f:47:1e:df:c0:b8:46:e6:dd:2b:a1:7d:d3:84
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4c:d3:3c:24:08:92:2b:6e:f8:0c:8c:08:80:4a:1e:b6:65:a1:a9:5a
Fingerprint (sha256): 3b:cc:3f:13:e4:2f:2c:48:69:00:89:c8:cc:8e:8e:a8:79:4a:9e:34:cc:55:47:cd:56:83:7d:eb:81:68:d4:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate news.tib.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for news.tib.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

news.tib.eu

Other certificates including the domain name tib.eu

(limited to 100 certificates)
mybib11.test.docdel.tib.eu
tib.eu
tib.eu
gitintra.rz.tib.eu
msxmail.mtest.tib.eu
admin.tib.eu
news.tib.eu
imap.admin.tib.eu
rdgw01.rds.tib.eu
lbst.tib.eu
tib.eu
tib.eu
git.tib.eu
git.tib.eu
vhlbs.tib.eu
msxmail.mtest.tib.eu
opac.tib.eu
opact.tib.eu
mybib11.test.docdel.tib.eu
scbp01.rds.tib.eu
tib.eu
scbp01.rds.tib.eu
news.tib.eu
tib.eu
git.tib.eu
imap.tib.eu
opac.tib.eu
mailgate.tib.eu
mybib01.develop.docdel.tib.eu
mybib01.develop.docdel.tib.eu
nscale-prod.tib.eu
nscale-prod.tib.eu
news.tib.eu
checkmk.admin.tib.eu
*.av.tib.eu
news.tib.eu
*.labs.tib.eu
*.projects.tib.eu
news.tib.eu
av.tib.eu
tib.eu
*.shan01.han.tib.eu
bibcontrol.tib.eu
xmpp.rrzn.uni-hannover.de
ssollw01.tib.eu
news.tib.eu
*.SHAN02.HAN.TIB.EU
tib.eu
primion.tib.eu
admin.tib.eu
docdel.tib.eu
tib.eu
msxmail.tib.eu
mybib21.docdel.tib.eu
tib.eu
tib.eu
mailgate.tib.eu
*.develop.tib.eu
waswenn.tib.eu
vhlbs.tib.eu
mailgate.tib.eu
*.shan02.han.tib.eu
tib.eu
tib.eu
tib.eu
tib.eu
tib.eu
gitintra.rz.tib.eu
office.tib.eu
*.fid-move.tib.eu
opact.tib.eu
*.shan01.han.tib.eu
*.shan01.han.tib.eu
xmpp.rrzn.uni-hannover.de
*.projects.tib.eu
opac.tib.eu
rdgw01.rds.tib.eu
opac.tib.eu
edocs.tib.eu
*.av.tib.eu
scbp01.rds.tib.eu
news.tib.eu
*.shan01.han.tib.eu
av.tib.eu
ssollw02.tib.eu
tib.eu
tib.eu
*.develop.tib.eu
tib.eu
rdgw01.rds.tib.eu
tib.eu
news.tib.eu
lbst.tib.eu
checkmk.admin.tib.eu
tib.eu
*.shan02.han.tib.eu
msxmail.tib.eu
sqpilotra01.tib.eu
tib.eu
tib.eu

Certificate

The complete raw certificate details for news.tib.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334099674723573213594617446210723108238492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 05:18:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 05:18:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'news.tib.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 739171044827783071076069724200979539173702409038775672048496312020506501204326064480622441739342658521979720194032405729145430513154124245371034582301514321122620725729716217148468522281492538896827053765448015332994514366952622401471994833699173269160913654122405533284207063952187853784928641530852753482471411462757861943874379798274720634971305414684062650207756296851130809035477731165667506326741029832198933327988314349516924127655781821836750649584906550760069302978759899065155604461437559031191709258791186799602714147089204851438933687477844791316984504760666205473686542210765880339674523916459092042088588468835388718107070893621172411162977100435085901510311206912567868694758558961626655218019333525799672998959121752273454629875166291495175840457010654693868360628122884587599017045450819211141340951644183282970630426745477329608094226226714638613679507282142998527020573592725047761591682452304408325625585080720826890780107559369071125597675975255375715289153616413288177660860972301805166593833387787897886827529204720088596505769324350138987691424873177748293361734064297941884308960942146412215254910387477186296464958468705219093064276229675460016839282711925578823497719834453848482746962360080509753990904427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aef2863a482c6f471edfc0b846e6dd2ba17dd384
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.tib.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f1ccefaa00000040300473045022100e328cd2dfcafe585ef7b6d5bddeebdf797870e4e33f5121d4a6f5e6d16b7033102207be1f3b77ae52b77089dca8ab3856a7ae4e5fac955159264cf65926fd7f9308d00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f1ccefad000000403004630440220655bd9f842d9028f55ba5cb3c6baa0e6ef80fdaaa56337d24674142240bd959402202d7a79e954850d3283bb76408349f023e2d64504a8a3858b1effdacdc7f58c8f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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