mail.fuin-uireb.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4d:f2:23:31:5d:d4:70:66:c0:00:a2:13:b5:27:12:3c:d2 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.fuin-uireb.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4d:f2:23:31:5d:d4:70:66:c0:00:a2:13:b5:27:12:3c:d2
Serial Number (int): 287860455954835036386516821053926664191186
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:a1:b5:d7:1b:a9:20:94:4f:eb:fa:96:cd:64:ad:4e:3c:f3:d8:9c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ba:6d:60:f9:b9:76:f2:8c:88:9b:70:a8:f4:c5:17:0e:1d:29:c3:b9
Fingerprint (sha256): 6f:40:0b:90:b3:be:b6:1f:9a:2d:e3:be:53:3f:5d:88:69:68:a0:7e:b8:22:c6:9e:92:71:56:0c:eb:84:f5:17

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mail.fuin-uireb.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.fuin-uireb.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arnemetia.fuin-uireb.de
mail.fuin-uireb.de
meduna.fuin-uireb.de

Other certificates including the domain name fuin-uireb.de

(limited to 100 certificates)
owncloud.fuin-uireb.de
brigid.fuin-uireb.de
hosting.fuin-uireb.de
hosting.fuin-uireb.de
hosting.fuin-uireb.de
hosting.fuin-uireb.de
hosting.fuin-uireb.de
hosting.fuin-uireb.de
brigid.fuin-uireb.de
brigid.fuin-uireb.de
mail.fuin-uireb.de
jabber.fuin-uireb.de
brigid.fuin-uireb.de
hosting.fuin-uireb.de
mail.fuin-uireb.de
brigid.fuin-uireb.de
mail.fuin-uireb.de
owncloud.fuin-uireb.de

Certificate

The complete raw certificate details for mail.fuin-uireb.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287860455954835036386516821053926664191186
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-01 20:06:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-30 20:06:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.fuin-uireb.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 618971303639003975146293004447297944971686097899213880038311237821623075894680663678565903276108339043520348655510922455571509055289932544977241394369792032845864582806216148235713696585723879070669727404959021180045956876369958715112294097690331032472377898018060060874445390569468089802101805150173937915679473010272215841258373823371383264226385716393495625626576242206022524982499216376970720590305155956604143771418132088059800734639589887664020020548078608281689147410105205157990760618232597051445911284552434719345490080150137800977146071921153578045907661399318755069462359444098480485963796323382134733489658849993608828162028339933549228658668475482795104180894584882601749531571161999610547542273844969465067762325722499237380120850922744555540884458297893851004937343244905332778980154908228137155265581510967672471736994725039460905070960995256850684182977135343038331133262897358995690556686404580104340986598624988569978552398962356700840658468201266709947860868373805704070154190555571825375775009862660033066975591769428329602512158130023136445779795470043902867106079681354017579281786018209729065363615313711689416600791647560300373464176286616669057384720570624011351934042493566642888675202917881563540124081759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52a1b5d71ba920944febfa96cd64ad4e3cf3d89c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arnemetia.fuin-uireb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.fuin-uireb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meduna.fuin-uireb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c4f018a9400000403004830460221009e59d292ef9797a58e4f0d5df5f0835d9fd7c11c69e940d7a0d5334792927d1a022100cd6ce3fdf2c343c4a007e7a17cb74c2a9da8802ba7f34776b42b7b539149e9d100750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c4f018a61000004030046304402207255699713b071fe782516633ebbae6d7288eb8526bf3cc43a7ab4e62a5c9f9402204d3cea7082d21a267c0c6a8f9568072fe7439d05c6d4ebfc8654ea8900ab11ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00720499d9a937aa938c5dd74dbface7a9420eda30d3bf2699b21c9ce5e65ce30e9fd235d0376929c28a6d3537b6437d0c83fbe58bb20494d19df875a2aa86997fa02e1fa95a0a02eac8a51395f264b703cd67818e2266f3319168b546b4406b7ac6c56b819c2cfd1976a06570aa7b1957863e1f79cba84a9fb6b75cf237c592bf8a1f7d92ed2cbf2e1a23ebb603f0eca93fd5fd1bda8fa5c3ca9272227d4fdbd66a18b9f0e67bb000d2f1861031c55f49ac2fe459a04f904b1bf560cad18fa5057f897105e42e1b56b97f57bc66e5170fa28aa459226ca0e2cab4e9bb89bbb5611834df47bf63690331df7fa0cde2ab6776937f8f2457572579510b8553a63c29