files.grade-rc.de

Issued by R3

About this certificate

This digital certificate with serial number 04:e4:dc:85:16:4f:a5:5c:a3:e9:7c:77:59:38:ba:56:33:89 was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=files.grade-rc.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e4:dc:85:16:4f:a5:5c:a3:e9:7c:77:59:38:ba:56:33:89
Serial Number (int): 426326644572093036021070795905010031276937
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fa:91:f9:52:e9:83:0e:fe:7c:6f:b9:7f:c6:70:6f:25:e8:1a:a9:d0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e9:10:e1:1e:19:e7:9a:01:24:82:39:ee:1c:67:76:37:73:6c:6d:53
Fingerprint (sha256): 66:b0:28:d2:7c:ae:a7:d0:2b:ae:7c:26:0b:66:9e:de:3b:4a:42:98:ed:72:6d:68:37:4d:df:a8:8e:79:8f:c1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate files.grade-rc.de

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for files.grade-rc.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.manage.portal.grade-rc.de
dev.next.manage.portal.grade-rc.de
dev.next.portal.grade-rc.de
dev.portal.grade-rc.de
files.grade-rc.de
files.macustar.eu
gitlab.grade-rc.de
grade-imbie-gw.grade-rc.de
jh.dev.next.manage.portal.grade-rc.de
manage.portal.grade-rc.de
member.grade-rc.de
nextcloud.grade-rc.de
nextcloud.study.macustar.eu
portal.grade-rc.de
portal.grade-rc.org
portal.grade.uni-bonn.de
rop-register.grade.uni-bonn.de
terminanfrage.augenklinik.ukbonn.de
terminanfrage.augenklinik.uni-bonn.de
test.certification.macustar.eu

Other certificates including the domain name grade-rc.de

(limited to 100 certificates)
portal.grade-rc.de
portal.grade-rc.de
mail.grade-rc.de
mail.grade-rc.de
grade-rc.de
grade-rc.de
portal.grade-rc.de
grade-rc.de
grade-rc.de
grade-rc.de
mail.grade-rc.de
portal.grade-rc.de
mail.grade-rc.de
gitlab.grade-rc.de
grade-rc.de
chat.grade-rc.de
files.grade-rc.de
files.grade-rc.de
mail.grade-rc.de
grade-rc.de
imbie-rp.grade-rc.de
grade-rc.de
grade-rc.de
files.grade-rc.de
grade-rc.de
portal.grade-rc.de
files.grade-rc.de
grade-rc.de
files.grade-rc.de
grade-rc.de
portal.grade-rc.de
mail.grade-rc.de
files.grade-rc.de
grade-rc.de
grade-rc.de
grade-rc.de
grade-rc.de
files.grade-rc.de
imbie-rp.grade-rc.de
grade-rc.de
mail.grade-rc.de
files.grade-rc.de
portal.grade-rc.de
grade-rc.de
files.grade-rc.de
grade-rc.de
imbie-rp.grade-rc.de
files.grade-rc.de
grade-rc.de
portal.grade-rc.de
files.grade-rc.de
grade-rc.de
mail.grade-rc.de
grade-rc.de
grade-rc.de
grade-rc.de
files.grade-rc.de
imbie-rp.grade-rc.de
grade-rc.de
mail.grade-rc.de
files.grade-rc.de
grade-rc.de
imbie-rp.grade-rc.de
portal.grade-rc.de
grade-rc.de
portal.grade-rc.de
grade-rc.de
grade-rc.de
grade-rc.de

Certificate

The complete raw certificate details for files.grade-rc.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rPxrko76I/eDbB/Tnwt
IbvuY6A9EW6Dl4InbA9UY7x8kE8AuSQErTcBhtYDZzGufVieK0JoeY6psLNtL6Oc
xmtiQEyPnY5+8qaU/oxGwezVcjeR5K5b7kZ1xvNmKkmhjEMvPOswb+Gc/UGihJHq
jSxxzVOITm1aPzhk+XcPex9Bv3MB9pzpn9ZNTiRR07Xtw5CLVfYnHucri7/2p4NB
r9tnuWJSI/4HajMhwmRV+mYD8QlNX5XlNjympARwz6IPsX5uE4mq7DddsCrSrl2x
YPU0FcVDtpLlz3lQgeQ1ARm3/oyp7+Pc5xX+k7TZks1lJ/liEhGOxSstq+wMrpuF
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426326644572093036021070795905010031276937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-16 14:03:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-14 14:03:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'files.grade-rc.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28113637428414907376054176114584033310068888263092549695327543735666533033446828456485605974375421789602804723182012020905144948878683610127937123686865498323274245843182063952012986940342415030480168518416910454316075473325396745376433595756438928484242767707805025934558460729917414077569959431294376644089171290783804111005438043760209507702018072018657368744294949202030059659241689854501459090201120767636978519225889967511846083304804670988693406233685753465247390417892701603582182365818036167346621969277329442099725352697402135844441063087521943865106467982999993550847032258833656724267010760524208048670001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa91f952e9830efe7c6fb97fc6706f25e81aa9d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (555 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.manage.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.next.manage.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.next.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.macustar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grade-imbie-gw.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.dev.next.manage.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage.portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'member.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud.study.macustar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.grade-rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.grade-rc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rop-register.grade.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terminanfrage.augenklinik.ukbonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terminanfrage.augenklinik.uni-bonn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.certification.macustar.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c2000001783b8fd79c000004030047304502207fd0d9a6db6c4fc3717fe5a33412b3e158c6640bd15f911605af751fc705e06b022100b3d521f5141e569efdff89a2d41b14e84bd73d8b57a18f146d6f2237d3918622007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001783b8fd7a00000040300473045022100fe97ee6f6ce1e85e89f2b033e2a2e1d6034c3d1448e9b426e5cf22382e372efd022043762dfe04f6f53776afafd6109ea64018dcd7bd1f044325411e7e481c8f1bc2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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