fellowship.ercim.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:24:d5:03:d0:a1:e3:5f:cc:04:6f:0a:6c:23:c9:1e:d1:ac was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fellowship.ercim.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:24:d5:03:d0:a1:e3:5f:cc:04:6f:0a:6c:23:c9:1e:d1:ac
Serial Number (int): 273870168375994587942935446932722701750700
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a9:e0:fc:ed:8e:6c:7e:17:c9:74:74:4b:9d:fc:f6:6e:18:ee:73:77
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cf:23:81:02:2e:73:53:a9:54:91:bc:99:7c:68:d7:20:de:a5:c8:5c
Fingerprint (sha256): 4e:2c:7f:8e:bc:29:9e:cc:cd:0c:82:b4:f0:84:44:e5:49:49:0f:65:27:46:f3:80:1e:19:2d:01:a4:01:96:dc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fellowship.ercim.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fellowship.ercim.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fellowship.ercim.eu

Other certificates including the domain name ercim.eu

(limited to 100 certificates)
eficst.ercim.eu
bscw.ercim.eu
bscw.ercim.eu
webmail.sophia.ercim.eu
webmail.sophia.ercim.eu
ercim-news.ercim.eu
www.ercim.eu
wiki.ercim.eu
strews.ercim.eu
paasage.ercim.eu
ercim-news.ercim.eu
paasage.ercim.eu
strews.ercim.eu
fellowship.ercim.eu
www.ercim.eu
openmediaweb.ercim.eu
paasage.ercim.eu
wiki.ercim.eu
paasage.ercim.eu
trac.ercim.eu
webmail.sophia.ercim.eu
svn.ercim.eu
bscw.ercim.eu
trac.ercim.eu
webmail.sophia.ercim.eu
gitlab.ercim.eu
eficst.ercim.eu
strews.ercim.eu
ercim.eu
easyts-egi-old.ercim.eu
svn.ercim.eu
ercim-news.ercim.eu
svn.ercim.eu
lists.ercim.eu
eficst.ercim.eu
bscw.ercim.eu
ercim-news.ercim.eu
trac.ercim.eu
trac.ercim.eu
wiki.ercim.eu
fellowship.ercim.eu
easyts-egi-test.ercim.eu
webmail.sophia.ercim.eu
fellowship.ercim.eu
ercim-news.ercim.eu
fellowship.ercim.eu
bscw.ercim.eu
stats.ercim.eu
www.ercim.eu
bscw.ercim.eu
svn.ercim.eu
eficst.ercim.eu
lists.ercim.eu
bscw.ercim.eu
paasage.ercim.eu
wiki.ercim.eu
strews.ercim.eu
vre4eic.ercim.eu
stats.ercim.eu
stats.ercim.eu
easyts-test.ercim.eu
easyts-egi-old.ercim.eu
trac.ercim.eu
bscw.ercim.eu
www.ercim.eu
ercim.eu
stats.ercim.eu
lists.ercim.eu
wiki.ercim.eu
trac.ercim.eu
svn.ercim.eu
trac.ercim.eu
paasage.ercim.eu
strews.ercim.eu
fellowship.ercim.eu
lists.ercim.eu
paasage.ercim.eu
fellowship.ercim.eu
paasage.ercim.eu
strews.ercim.eu
svn.ercim.eu
lists.ercim.eu
www.ercim.eu
ercim-news.ercim.eu
eficst.ercim.eu
strews.ercim.eu
strews.ercim.eu
ercim.eu
lists.ercim.eu
webmail.sophia.ercim.eu
*.ercim.eu
lists.ercim.eu
wiki.ercim.eu
easyts-egi.ercim.eu
lists.ercim.eu
wiki.ercim.eu
stats.ercim.eu
trac.ercim.eu
www.ercim.eu
fellowship.ercim.eu

Certificate

The complete raw certificate details for fellowship.ercim.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273870168375994587942935446932722701750700
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-28 11:56:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-29 11:56:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fellowship.ercim.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824069817317686555472456064015521883492669007484622759228235879517863375344236921041587436219942548759313195443179617444857073020130159597366302808378015077214173636748746147802860699118430089189690502644262219270360083652237009517323174828846524009354071099881185027474062741704802772534741162151838179975442929821021129365183562784283747727714241071750736629771083098051955250633933352641240000979348385706004346467620766416222650909091631876914991468374666198914478346146869925510196310960894227351054170827244208029519806839926571306606229437168016419756446471864661325519570611532109404520779896771464073596909974600452881766559509245169226679187257816124209323437788287080617479228141313653167117008549576713781506579437693283185331631850114522069901526193053060584949740576268697263157295924723654684433103846475511828480596738180105562675038881460467990111835849232190854585295865740844143869370361250786210002299797779434693547215793041101954842844488226106816641954831067151073398859319748581375362545323322868322400339985545799157373286610477547577469887309096359393669780809439332027850516235143449738936741939188854926364645423929836158752058435563534044086089780949214886829582440397280071867953322172710195141896067481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9e0fced8e6c7e17c974744b9dfcf66e18ee7377
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fellowship.ercim.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169342d6ae40000040300483046022100dbd1592b1385469fa40f2e9933b4e8928167a7280f9565213f4142bc6d15e0f0022100fd34d8787ee5e5ee7c0731e21b7b37e3f6e9c8c20819513e192c69e550e5bd5f007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169342d6b2e0000040300483046022100e65f0e5f17c8a236d3661dba2d0f855318a894729f9c56bb01d316d5664ea8f0022100f49e6e6b9bc6d647ecd0b4462ce5ac18b155e5694068726f64c7b5696d527544
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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