support.unistor.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:42:85:ad:a4:9f:2a:34:69:20:8c:2b:9c:b5:6f:09:06:a2 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=support.unistor.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:85:ad:a4:9f:2a:34:69:20:8c:2b:9c:b5:6f:09:06:a2
Serial Number (int): 283973182941784113434376337221866981230242
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6d:b1:9f:70:71:7f:6a:b5:fb:84:23:74:0e:39:72:65:ca:5e:66:b6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6b:71:f6:20:d3:69:1e:49:cd:2e:ad:2d:74:0b:0b:49:3e:31:e6:ba
Fingerprint (sha256): 7e:6c:90:b8:4b:57:52:7c:ab:cc:5c:93:b4:4d:eb:e1:90:35:b1:52:3f:77:5b:94:e5:50:ee:f1:dc:18:42:5e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate support.unistor.de

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.unistor.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bl.nasec.de
dk.nasec.de
easyjob.seaside-productions.de
files.unistor.de
monitor.unistor.de
seafile.digital-eastside.de
seafile.nasec.de
support.unistor.de
tickets.rc-partners.de
wiki.unistor.de

Other certificates including the domain name unistor.de

(limited to 100 certificates)
seafile.nasec.de
seafile.nasec.de
unistor.de
unistor.de
checkmk.nasec.de
seafile.nasec.de
seafile.nasec.de
seafile.nasec.de
unistor.de
unistor.de
v22018102995674690.bestsrv.de
checkmk.nasec.de
unistor.de
wiki.unistor.de
checkmk.nasec.de
unistor.de
v22018102995674690.bestsrv.de
unistor.de
wiki.unistor.de
v22018102995674690.bestsrv.de
unistor.de
checkmk.nasec.de
unistor.de
seafile.nasec.de
v22018102995674690.bestsrv.de
checkmk.nasec.de
support.unistor.de
unistor.de
www.unistor.de
seafile.nasec.de
support.unistor.de
checkmk.nasec.de
support.unistor.de
seafile.nasec.de
v22018102995674690.bestsrv.de
unistor.de
unistor.de
seafile.nasec.de
wiki.unistor.de
seafile.nasec.de
wiki.nasec.de
unistor.de
v22018102995674690.bestsrv.de
welden.unistor.de
seafile.nasec.de
wiki.unistor.de
seafile.nasec.de
unistor.de
v22018102995674690.bestsrv.de
support.unistor.de
unistor.de
checkmk.nasec.de
v22018102995674690.bestsrv.de
checkmk.nasec.de
seafile.nasec.de
wiki.unistor.de
support.unistor.de
v22018102995674690.bestsrv.de
checkmk.nasec.de
seafile.nasec.de
seafile.nasec.de

Certificate

The complete raw certificate details for support.unistor.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283973182941784113434376337221866981230242
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-27 09:38:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-26 09:38:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.unistor.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782396589799406191460491834552681519185045070223450146843842044288290767107254975910519248937536593959073781757768174783117968764028870820571973311204823528997500038089755907775657755480070454230106870357473203647699807358662420948056741859149491292604008186305775167432577791745384439666419537128322614874041065864010559355797858781692104957792886134620376997040281960183744653014066349848455662258975408015130012206028150694794429889138585218738787084183637121597895990018606629741355298252140820207298876250396660649517762785471772599068493013369168761547314123253244443710859972799301822363817802222455433660147261051085959104440363409747423565599279055656238046271501865863466368169401421285715089623013107241449587867301840627312625777618720490198706921523259709051054928270206679310017782111825068178827400850484779171545827343449394031604254212411705539917051296488233024820349933185317249719921484716020904733802125506992168833409146504553807055448255767809115585073895588578026365746349562898826847774549541561106301121712283866007933396019459688457808941031848385575310746176491550864595187633061644225329348065924238324671322519179859316232329026040111733231036393209387452523548346472860377464823885136352059717943707183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6db19f70717f6ab5fb8423740e397265ca5e66b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (207 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bl.nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dk.nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyjob.seaside-productions.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.unistor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.unistor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seafile.digital-eastside.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seafile.nasec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.unistor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.rc-partners.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.unistor.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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