paasage.ercim.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a3:a9:da:4d:b8:d5:f8:55:bf:b1:6d:f6:ab:32:ba:3c:81 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=paasage.ercim.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a3:a9:da:4d:b8:d5:f8:55:bf:b1:6d:f6:ab:32:ba:3c:81
Serial Number (int): 317028656631786262768781258557318187596929
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:41:ec:24:b7:d8:bf:02:be:e3:ad:1f:66:b6:10:73:c6:60:5e:af
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 65:d5:92:5d:e9:3c:d1:b9:5d:8e:ac:7f:c1:d7:da:d3:27:65:8b:58
Fingerprint (sha256): 3c:4f:8f:4c:90:39:d4:3b:c0:9e:3d:84:fb:e0:4d:45:21:3a:f5:fc:6c:4b:d8:79:4f:d2:a5:fc:b6:6c:d4:d4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate paasage.ercim.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for paasage.ercim.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

paasage.ercim.eu

Other certificates including the domain name ercim.eu

(limited to 100 certificates)
eficst.ercim.eu
bscw.ercim.eu
bscw.ercim.eu
webmail.sophia.ercim.eu
webmail.sophia.ercim.eu
ercim-news.ercim.eu
www.ercim.eu
wiki.ercim.eu
strews.ercim.eu
paasage.ercim.eu
ercim-news.ercim.eu
paasage.ercim.eu
strews.ercim.eu
fellowship.ercim.eu
www.ercim.eu
openmediaweb.ercim.eu
paasage.ercim.eu
wiki.ercim.eu
paasage.ercim.eu
trac.ercim.eu
webmail.sophia.ercim.eu
svn.ercim.eu
bscw.ercim.eu
trac.ercim.eu
webmail.sophia.ercim.eu
gitlab.ercim.eu
eficst.ercim.eu
strews.ercim.eu
ercim.eu
easyts-egi-old.ercim.eu
svn.ercim.eu
ercim-news.ercim.eu
svn.ercim.eu
lists.ercim.eu
eficst.ercim.eu
bscw.ercim.eu
ercim-news.ercim.eu
trac.ercim.eu
trac.ercim.eu
wiki.ercim.eu
fellowship.ercim.eu
easyts-egi-test.ercim.eu
webmail.sophia.ercim.eu
fellowship.ercim.eu
ercim-news.ercim.eu
fellowship.ercim.eu
bscw.ercim.eu
stats.ercim.eu
www.ercim.eu
bscw.ercim.eu
svn.ercim.eu
eficst.ercim.eu
lists.ercim.eu
bscw.ercim.eu
paasage.ercim.eu
wiki.ercim.eu
strews.ercim.eu
vre4eic.ercim.eu
stats.ercim.eu
stats.ercim.eu
easyts-test.ercim.eu
easyts-egi-old.ercim.eu
trac.ercim.eu
bscw.ercim.eu
www.ercim.eu
ercim.eu
stats.ercim.eu
lists.ercim.eu
wiki.ercim.eu
trac.ercim.eu
svn.ercim.eu
trac.ercim.eu
paasage.ercim.eu
strews.ercim.eu
fellowship.ercim.eu
lists.ercim.eu
paasage.ercim.eu
fellowship.ercim.eu
paasage.ercim.eu
strews.ercim.eu
svn.ercim.eu
lists.ercim.eu
www.ercim.eu
ercim-news.ercim.eu
eficst.ercim.eu
strews.ercim.eu
strews.ercim.eu
ercim.eu
lists.ercim.eu
webmail.sophia.ercim.eu
*.ercim.eu
lists.ercim.eu
wiki.ercim.eu
easyts-egi.ercim.eu
lists.ercim.eu
wiki.ercim.eu
stats.ercim.eu
trac.ercim.eu
www.ercim.eu
fellowship.ercim.eu

Certificate

The complete raw certificate details for paasage.ercim.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317028656631786262768781258557318187596929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-15 07:15:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-13 07:15:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paasage.ercim.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 657470868587484487957076455295381836864962036522488336433660046008687834948787458955042509557774037693897044210240326099384094782568931743670184934879183853471711426410052947698394657074451960483080196204797006576784627694969292348141536304546357437184130509828962659111379801518228461637749998987771419630992285928534479061853300148378951310179402650082662051817392485735098257165522867110680106602766427145919647839387261050001525896170251903553693482702695082057881321316732559699610623348976857734473340318644997164701466421426356327785446643350184442593794310988753788281842784618058669642608327447476527254657723891879412173198368847659626444892248666526444872823933749162677151167221034459789551452240763374340312013230617691611200975655030533787010889362885002885288065609978886800527560810565032299160244031824453652704400622166293628385123457940788553402648212661488878883149907516666832348148126785009877973012897218693880600247106099857882583477661552321140190684991027397803319223925842886437891799331581156322138846271781914891986294878564455813660263498789959653786802396164578263719792543359674885614514135821486997722555572653173954799945689640133679733912576278371055876588485488497051925929656985054325417147655469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5441ec24b7d8bf02bee3ad1f66b61073c6605eaf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paasage.ercim.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c9458922f000004030048304602210086f127aeae23a0b7638672a96dcb49b5727233b76f585e82efa94595c8329525022100f365fc8b14b12430fda6b6ce5ce92fec8046a13423b7f26f33f384fab65f58ab007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c9458924b000004030048304602210092500558805f92ab1c08a00e72441337b2223018d63509ddad3df8cc6e38e1ca022100bb068806056b99f301c6815dc1b7bcf22f11ce8636b0bef84ef18e59ee91cc0c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008c421141b1bc9502dfac5c067b30117e2303cd4977923ca4b2468d41bc3a56f9a58f4a687521c3b806bf74439257928bae3cac87bde81402ad50c753c70b40f3c8211a8616f0463ce2ea1d592c56179ba8bd7d4c03dabebc42542d5b3aea1c685901d65324659b7f1cd990e7adb87b7ecc171cd4141b0ab6ef18ffea359cc407b0dda6d7e65d73711067729d0683cabf52539d64954546370875a7af3824854f18e56cf0a3777badf339197368b24fa0158331972acf745c3141132c807c20196cb58234acc30ed4b7720510b9e96dafe5c9cedfeb1c88532902ab4ce9d87e4626aecef63de6c10a91b8569e36ff605d860ad31e217c49aaa8457be2f71370d5