dev.academics.de

Issued by R3

About this certificate

This digital certificate with serial number 03:86:cb:88:38:70:e9:ce:cc:79:2d:f3:2b:22:c9:ba:02:de was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.academics.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:86:cb:88:38:70:e9:ce:cc:79:2d:f3:2b:22:c9:ba:02:de
Serial Number (int): 307205235542964444720417342026244408607454
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 60:a3:b6:93:65:ce:71:d5:57:16:e2:32:df:84:5d:86:4e:db:ab:a4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 68:74:f2:f8:52:ff:ba:36:80:c8:7d:19:fc:f6:68:fb:7b:cc:6a:f5
Fingerprint (sha256): 7c:76:6e:f7:f1:3f:6e:72:b3:17:cc:3f:d3:79:63:dc:6e:4e:34:26:0f:e4:04:9d:fc:30:84:ba:cf:b0:ae:a1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dev.academics.de

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.academics.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.api.dev.academics.com
*.api.dev.academics.de
*.api.dev.jobs.zeit.de
*.dev.academics.at
*.dev.academics.ch
*.dev.academics.com
*.dev.academics.de
*.dev.jobs.zeit.de
dev.academics.at
dev.academics.ch
dev.academics.com
dev.academics.de
dev.jobs.zeit.de

Other certificates including the domain name academics.de

(limited to 100 certificates)
cmp.channelpartner.de
www.academics.de
kronos.prod.academics.de
prod.academics.de
www.academics.de
staging.academics.de
prod.academics.de
www.academics.de
kronos.prod.academics.de
mms.sp-prod.net
cmp.channelpartner.de
www.academics.de
rhea.stage.academics.de
stage.academics.de
stage.academics.de
www.academics.de
www.academics.de
prod.academics.de
www.academics.de
prod.academics.de
inserieren-test-feature.zeit.de
www.academics.de
prod.academics.de
kronos.prod.academics.de
www.academics.de
inserieren-test-feature.zeit.de
media.academics.de
logos.academics.de
staging.academics.de
*.academics.de
www.academics.de
staging.academics.de
media.academics.de
cmp.academics.at
cmp.academics.at
prod.academics.de
cmp.academics.at
cmp.academics.de
staging.academics.de
media.academics.de
cmp.academics.at
bilder.academics.de
www.academics.de
cmp.academics.at
prod.academics.de
kronos.prod.academics.de
mms.sp-prod.net
kronos.prod.academics.de
kronos.prod.academics.de
prod.academics.de
stage.academics.de
cmp.academics.at
www.academics.de
kronos.prod.academics.de
prod.academics.de
prod.academics.de
media.academics.de
media.academics.de
www.academics.de
www.academics.de
cmp-sp.handelsblatt.com
media.academics.de
www.academics.de
kronos.prod.academics.de
*.academics.de
www.academics.de
www.academics.de
prod.academics.de
dev.academics.de
cmp-sp.handelsblatt.com
cmp.academics.at
www.academics.de
inserieren.academics.de
dev.academics.de
stage.academics.de
dev.academics.de
inserieren-test-feature.zeit.de
monitoring.academics.de
www.academics.de
prod.academics.de
prod.academics.de
athene.dev.academics.de
cmp.channelpartner.de
media.academics.de
athene.dev.academics.de
www.academics.de
cmp.channelpartner.de
cmp.channelpartner.de
media.academics.de
cmp.academics.at
zeus.dev.academics.de
cmp.infoworld.com
www.academics.de
prod.academics.de
cmp.academics.at
media.academics.de
stage.academics.de
cmp-sp.handelsblatt.com
cmp.channelpartner.de
staging.academics.de

Certificate

The complete raw certificate details for dev.academics.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA067TMl1mX09tPuLs9UCS
2sAhLv3XuY4vLqP3PpG60hqaHQLbgOZ/jvFywZlQ46fL4WZyE4EYR3qzsO8poO/a
1YDblbazeUqKKAqJLFVRpAy+O2a6GU4GlFNOLK/4jagE8RcKnvcXHTFUTWRh9t9M
GIYIhfoCz6E6l7ae7CnrvKkpSPwp5u8tZ7QYB8bqwu0V9QPv3i/TTYoaynjVxK1i
icjlSGC5E8GP4z/nqR+ugjGhVSItMRVthGlGSppVl6sXd/X3yVyVY+Rnx6Pt/RXh
c8yR6vYemWff8Mbv5RlxDkwKXGCziUqgbok7UonlgzjgVUHXkBfmS2KEPEs0R0av
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307205235542964444720417342026244408607454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-24 10:15:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-22 10:15:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.academics.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26722491762123431591818486842721766141700106033497568717121684020663774690162029310945159834851332405689218369147123435305284849114644424054094614450347404953767848390924857120659134414419556096023274126584088234343677013001638822857480912597469958946723956976224210890363009924108569358592593583342667123831216695562127832155338090048163538780284970927347543033249583841914010189403666042873307786568405159804858597523691015685739977934608394449596330608918779696917198966167098857298291083892933106862886922505189014142129592715572335080230573589963723208561043876744243134902227438764975361628052561170795522863003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60a3b69365ce71d55716e232df845d864edbaba4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (269 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.dev.academics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.dev.academics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.dev.jobs.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.academics.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.academics.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.academics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.academics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.jobs.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.academics.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.academics.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.academics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.academics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.jobs.zeit.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001871354ab180000040300473045022100ef6a3a722bc7f58a5c65dc9dc531a26b971abe2184ec1a6e6fdd0f0d9d060aeb02200e390c958eedc3e2aa071ee444a9ed98b8a8bff5bb50bbd57c1801f8c25834e00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001871354ab27000004030046304402202463ae73542e142ead7af636015e2492ab24ef624d4dab5804969faec6ed0f390220514a184090e9b4fc5d7eebd02c1a0f84c3023d4020f64a766983d9aaa97c3c83
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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