nextcloud.ifak.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f2:61:b9:3f:38:07:13:89:61:60:98:54:c7:1d:11:a4:2e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nextcloud.ifak.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f2:61:b9:3f:38:07:13:89:61:60:98:54:c7:1d:11:a4:2e
Serial Number (int): 343815087562888586025065165374834162639918
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:94:28:31:16:df:dc:d5:09:34:f7:04:d1:6a:9c:40:2f:d3:d5:c4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fe:a6:09:e6:84:54:e5:66:d7:a6:26:a1:51:04:58:c8:6b:b5:b7:8a
Fingerprint (sha256): 63:1f:51:9e:7f:0e:46:05:3c:a0:af:6a:cc:e5:f4:f9:95:e8:f7:aa:cd:2a:d5:14:c5:0c:11:32:5b:56:41:fb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nextcloud.ifak.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nextcloud.ifak.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nextcloud.ifak.eu

Other certificates including the domain name ifak.eu

(limited to 100 certificates)
service.ifak.eu
ifak.eu
www.ifak-ts.com
project.ifak.eu
simba.ifak.eu
project.ifak.eu
exchange.ifak.eu
exchange.ifak.eu
project.ifak.eu
ifak.eu
project.ifak.eu
mx.ifak.eu
exchange.ifak.eu
ifak.eu
zebra.ifak.eu
www.ifak-ts.com
nextcloud.ifak.eu
zebra.ifak.eu
fw01.ifak.eu
service.ifak.eu
fast.ifak.eu
project.ifak.eu
project.ifak.eu
service.ifak.eu
exchange.ifak.eu
zebra.ifak.eu
exchange.ifak.eu
nextcloud.ifak.eu
service.ifak.eu
service.ifak.eu
mail.ifak.eu
www.ifak.eu
www.ifak.eu
nextcloud.ifak.eu
project.ifak.eu
nextcloud.ifak.eu
ifak.eu
fw01.ifak.eu
project.ifak.eu
mail.ifak.eu
mx.ifak.eu
project.ifak.eu
www.ifak.eu
ifak.eu
nextcloud.ifak.eu
zebra.ifak.eu
project.ifak.eu
nextcloud.ifak.eu
ifak.eu
ifak.eu
ifak.eu
nextcloud.ifak.eu
nextcloud.ifak.eu
zebra.ifak.eu
project.ifak.eu
project.ifak.eu
zebra.ifak.eu
www.ifak-ts.com
www.ifak-ts.com
mx.ifak.eu
service.ifak.eu
zebra.ifak.eu
project.ifak.eu
www.ifak-ts.com
zebra.ifak.eu
exchange.ifak.eu
service.ifak.eu
service.ifak.eu
project.ifak.eu
nextcloud.ifak.eu
ifak.eu
nextcloud.ifak.eu
zebra.ifak.eu
service.ifak.eu
ifak.eu
project.ifak.eu
nextcloud.ifak.eu
ifak.eu
service.ifak.eu
www.ifak-ts.com
service.ifak.eu
ifak.eu
ifak.eu
nextcloud.ifak.eu
zebra.ifak.eu
project.ifak.eu
mx.ifak.eu
www.ifak-ts.com
www.ifak-ts.com
www.ifak.eu
ifak.eu
project.ifak.eu
project.ifak.eu
ifak.eu
www.ifak-ts.com
service.ifak.eu
*.ifak.eu
www.ifak.eu
project.ifak.eu
zebra.ifak.eu

Certificate

The complete raw certificate details for nextcloud.ifak.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343815087562888586025065165374834162639918
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-02 13:48:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-01 13:48:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nextcloud.ifak.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807161319210020716150156562106674915899418047008711089619413193539904373975950037825844344557057081542149078323145457877641252424343928969295072651971147554666277906064568753144009824795508815304974998684721403943115463006329772525251859586326077460218485326946677088334876617012983783085924997488094572049980254883235556395996134881795873511210393675533204416718255911004445761578973264996660406947611130754490844170737059990031076498295202465507158241206226543466632494811637070003140250853512016943354546391222120420020112309652447799215977382605912393605805824013787700463323556547052675399465856674931464412054350454894808829619560147810128108900448648022582918615905410182597177950021723028203208481047836032382232969176227741517272064315488112508274906388673295441254795064128185354506796804339149567472971291635039306092858229771447424043824061094188952331786402750976926523062380843211876103174344512922389722974615356590534930964026252515025986342896519393034314597171894750246564879807288009391620160293186364943413145619016318517921455978818535615378849631574729888810715052265060021930030182598041831047094856691626021958062632187367967492967258517389158231247005359957601910670490932681232692539854356275848241295879749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c94283116dfdcd50934f704d16a9c402fd3d5c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud.ifak.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169de85fa1600000403004730450220159186bd48f1e2b6389c7bc814fb4355ddba19bb9f3b5f934cfea7d614aac39c022100aac68846a287920bfaaf905b075e5efecf24a8f01a68935c17b36a42f2fe90d000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169de85fc860000040300463044022023844dc9038c3b871ccacfaf9fe170b5c0661b02c6578dfe2ee972ac0ff5576502201fd9a595f31389e3bd694205d97623150ac79494d5e918f861b6318e7cec8cb2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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