fsmed-koeln.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:39:ee:b0:ea:b4:52:a1:a6:85:bc:fa:a1:2c:51:51:00:f0 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fsmed-koeln.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:39:ee:b0:ea:b4:52:a1:a6:85:bc:fa:a1:2c:51:51:00:f0
Serial Number (int): 281050227577388634165998417292136209776880
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 71:d9:9b:62:1e:15:fd:46:4b:5d:90:26:76:16:90:e1:92:a9:a0:0c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1a:51:f3:5f:fe:ef:39:00:b3:2f:c6:9f:f0:98:e3:a0:59:ed:b2:f2
Fingerprint (sha256): 57:86:2a:eb:00:9d:b1:d9:7e:a6:af:5c:78:ed:e4:35:d8:8a:45:5d:f0:6d:a6:a7:7c:fb:16:20:a2:e8:55:e3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fsmed-koeln.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fsmed-koeln.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fsmed-koeln.de
fsmed.uni-koeln.de
www.fsmed-koeln.de
www.fsmed.uni-koeln.de

Other certificates including the domain name fsmed-koeln.de

(limited to 100 certificates)
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de

Certificate

The complete raw certificate details for fsmed-koeln.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGlTCCBX2gAwIBAgISAznusOq0UqGmhbz6oSxRUQDwMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjExOTI3MDRaFw0x
OTEyMjAxOTI3MDRaMBkxFzAVBgNVBAMTDmZzbWVkLWtvZWxuLmRlMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzvlnphUQpws4C2TP60OSgd8VSAT7JLWs
XqAMVn64ABIs0F3bxQXLjKF7WG7HpVaF3fsWbB46dlBEb5iwYNjjfUceM+7I24iz
3pe5Mox8uZZ7OeQGiIShSi+9JQqMG3anxv121LqQq9A+2w2FE52YWP+MMcDYfR3w
ToQ+qxnDrQLUWATjNX0hNhRy/Gi+sJ3+4hdNxDpThp+rWrxVgHscTnha4j1WRg2k
PEp3VgH6s3yWsT7BtWBpiGqyzZ4NmLR15SbhdwWvqyU91XAfPJZOLLd1ONuBg/eV
akp3eEs3GXoo2ILxw0yEkCiV0fafIt9SEc2m3Z7AE7INofvcXLafkW6vffuzhG9q
DEJrI9OxMgXlUaJtXvpkyTDFacv8n8EMB2YEqKCtO9/0MhaPUm1pwED+bNFJF6g9
ofVvny2NAquvfXvRXxfcvyGyVTVTY/92WjsSLXlZNz7ayZ6ntpmZkTn1KYCBITRr
z7SfJieyvlr+lWJlRTqvbvLP2Xz5GW00vZ8Iu8JUdehGDY7ksVSutIICsNKt95YZ
nTa2TUgf7xrOvQXFkrA6yAbjivJ/kVuATz8tUqivk4bCZMmQqr5tANgKCJegTJSh
h7Jajd7NYJ58yZBOo/2I+kuHIfrFsuUZrb1WXu9FYWXsVhFeZdSl0H+3NmLr7ISA
GaLBD/NkXRkCAwEAAaOCAqQwggKgMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUcdmb
Yh4V/UZLXZAmdhaQ4ZKpoAwwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzBZBgNVHREEUjBQgg5mc21lZC1rb2Vsbi5kZYIS
ZnNtZWQudW5pLWtvZWxuLmRlghJ3d3cuZnNtZWQta29lbG4uZGWCFnd3dy5mc21l
ZC51bmkta29lbG4uZGUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEF
BgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8o
kwGd3fHb/gAAAW1VgazCAAAEAwBIMEYCIQCqPFRynjfMufsEMhwHNjk/tnVkqbQe
Ntb4qkFgDdb2ygIhAJoWd+RCg5f9w6/FjqBLsRhZITKM5m45ZbQ/djnN/UvEAHYA
KTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFtVYGs4gAABAMARzBF
AiEAzZpROo2xLDMxIOfnDcBtqNL9WGN5MWUEUUqB8jnnrzUCIF6CeGSpu48UjtNK
wATqnOvuVGb50coLrlFzdNRAFXQAMA0GCSqGSIb3DQEBCwUAA4IBAQBlVIWF5V/D
lp7f/GAlnHLd0kbsOAIL9JViTyW9NK6oRT+CBfs2nf83JFOTQzAvEtJ4SUHtYiuu
HWPbZptBmRXQevSDG+Tm6GOuRo2VfonEAXcC1RRvKrFmwCyAUglMrNGWIBqL1TEV
GdzqKzvIvB2OpckAPdgoxhP3UKDyORgVIPNLczI7BrepgVCZRE0BgRblML/DmQiR
Z2qOOTjqT1KMJfs0PUEP8OyLo4eesyMlS1GJjukgZe3em9u0XMyUTCj7+gEuS0NB
w7SK8GYrWSD0kcilzcpLM5ycFmLtEicArkcieKlh0Bt1WzNME5xhL6zqiwXwbMl3
SfIbjLzj2Imx
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281050227577388634165998417292136209776880
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-21 19:27:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-20 19:27:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fsmed-koeln.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 844381221492315678588086022236143943923595101548902016280592630655548086083297228656165716996999631170932371941259732823987069074781663336658037206875391499337635166119226849649182855154925696582573672124111036837448992811523499784515658561267482464381616087637038421320954354822570996113982091641178386697330482358333090348997649784793905859358820790906945759685071941247366498090137231468557939889993383350545093021136626223921377827735397512214760464565055079765526017814787921672096375526907214929036391389959139305447738934557753623640525842313455882756006223538186986029324123625096704192466930017841151800080166035163334215171294041975750302258773655392542520268425064508189062059591002035886232507451853081207178987539850810516074053743576811233930420533451925762043119326118687364325361703076401174396042756383389022214618828621704822279029513096398295259129595741176161933625720802439794715278334617499978501273996272934419406884511986118903067190690115871325477455523466306087092272550929716848233691278745858976530186107326269714744060354509009975761918465559294882215842547373244655035138319223761669986224372196596781934971706728368620132201239699022672488095223683722345389448515676339207074314780588385937441333468441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71d99b621e15fd464b5d9026761690e192a9a00c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsmed-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsmed.uni-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsmed-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsmed.uni-koeln.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d5581acc20000040300483046022100aa3c54729e37ccb9fb04321c0736393fb67564a9b41e36d6f8aa41600dd6f6ca0221009a1677e4428397fdc3afc58ea04bb1185921328ce66e3965b43f7639cdfd4bc4007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d5581ace20000040300473045022100cd9a513a8db12c333120e7e70dc06da8d2fd586379316504514a81f239e7af3502205e827864a9bb8f148ed34ac004ea9cebee5466f9d1ca0bae517374d440157400
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0065548585e55fc3969edffc60259c72ddd246ec38020bf495624f25bd34aea8453f8205fb369dff3724539343302f12d2784941ed622bae1d63db669b419915d07af4831be4e6e863ae468d957e89c4017702d5146f2ab166c02c8052094cacd196201a8bd5311519dcea2b3bc8bc1d8ea5c9003dd828c613f750a0f239181520f34b73323b06b7a9815099444d018116e530bfc3990891676a8e3938ea4f528c25fb343d410ff0ec8ba3879eb323254b51898ee92065edde9bdbb45ccc944c28fbfa012e4b4341c3b48af0662b5920f491c8a5cdca4b339c9c1662ed122700ae472278a961d01b755b334c139c612facea8b05f06cc97749f21b8cbce3d889b1