www.academics.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9a:b1:f2:16:e6:91:cd:9b:a6:9f:e2:ff:50:e9:63:e6:c1 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.academics.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9a:b1:f2:16:e6:91:cd:9b:a6:9f:e2:ff:50:e9:63:e6:c1
Serial Number (int): 313976872656679571400896614701722667050689
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 53:42:30:fc:b7:97:0e:41:ea:fe:79:ea:fa:b7:6f:2e:9c:55:27:89
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bd:6e:17:4e:9a:4d:82:80:b2:11:3b:af:9c:45:35:80:d6:3b:b4:0c
Fingerprint (sha256): 88:4b:13:e6:5f:cc:24:3b:96:f9:94:72:d2:de:fc:9a:b2:6d:0d:d5:16:57:7a:92:b1:e3:e0:00:82:e9:01:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.academics.de

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.academics.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

academics.at
academics.ch
academics.com
academics.de
bilder.academics.de
images.academics.com
legacy.prod.academics.com
m.academics.at
m.academics.ch
m.academics.com
m.academics.de
www.academics.at
www.academics.ch
www.academics.com
www.academics.de

Other certificates including the domain name academics.de

(limited to 100 certificates)
cmp.channelpartner.de
www.academics.de
kronos.prod.academics.de
prod.academics.de
www.academics.de
staging.academics.de
prod.academics.de
www.academics.de
kronos.prod.academics.de
mms.sp-prod.net
cmp.channelpartner.de
www.academics.de
rhea.stage.academics.de
stage.academics.de
stage.academics.de
www.academics.de
www.academics.de
prod.academics.de
www.academics.de
prod.academics.de
inserieren-test-feature.zeit.de
www.academics.de
prod.academics.de
kronos.prod.academics.de
www.academics.de
inserieren-test-feature.zeit.de
media.academics.de
logos.academics.de
staging.academics.de
*.academics.de
www.academics.de
staging.academics.de
media.academics.de
cmp.academics.at
cmp.academics.at
prod.academics.de
cmp.academics.at
cmp.academics.de
staging.academics.de
media.academics.de
bilder.academics.de
www.academics.de
cmp.academics.at
prod.academics.de
kronos.prod.academics.de
mms.sp-prod.net
kronos.prod.academics.de
kronos.prod.academics.de
prod.academics.de
stage.academics.de
cmp.academics.at
www.academics.de
prod.academics.de
prod.academics.de
media.academics.de
media.academics.de
www.academics.de
www.academics.de
cmp-sp.handelsblatt.com
media.academics.de
www.academics.de
kronos.prod.academics.de
*.academics.de
www.academics.de
www.academics.de
prod.academics.de
dev.academics.de
cmp-sp.handelsblatt.com
cmp.academics.at
www.academics.de
inserieren.academics.de
dev.academics.de
stage.academics.de
dev.academics.de
inserieren-test-feature.zeit.de
monitoring.academics.de
www.academics.de
prod.academics.de
prod.academics.de
athene.dev.academics.de
cmp.channelpartner.de
media.academics.de
athene.dev.academics.de
www.academics.de
cmp.channelpartner.de
cmp.channelpartner.de
media.academics.de
cmp.academics.at
zeus.dev.academics.de
cmp.infoworld.com
www.academics.de
prod.academics.de
cmp.academics.at
media.academics.de
stage.academics.de
cmp-sp.handelsblatt.com
cmp.channelpartner.de
staging.academics.de
staging.academics.de
dev.academics.de

Certificate

The complete raw certificate details for www.academics.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslRUHXCW7F28Pv1/xCJq
FVZKF9lcr1IR495o18QcmLC4ZeEZxESoXdylZPuX/2rx1WjysyO/n9Px+3DDxxIT
KskNkS1wDrAgOzVwG7B5Som1GMSJoLQo8gHx5rRgPyn636Th0O53LyI2jlU7o+J1
rBHDq7WysfbS+Aa1BcszX5gJoEBQnlNseyISmnyq2fvvZxE0jsutgfRoW6sHufM+
4o902PJws7gFRPdmqZLNcFacBjFS5DNxectdkg/izUbLASp4eKEH5OtmPoDBOHkr
ZrkdjuJegzG5mtm5K193OInlFrYgrBlBLEviNu5fjjVbmz2LFzN8Ts8vLsescAOE
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313976872656679571400896614701722667050689
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-11 03:20:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-09 03:20:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.academics.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22512002253759996567893159965491786321566387860522619824703421622581482686269942380653653719673323773942267764418689791214170934689370891541504064694579492387416927610409807614658017489239543113177970387443728608802088967906400241987022285254685433026031937415501608486811773694749287584664928893884789303700878449619621239636948820122407967656738370875073877356826775445928382727438263232740139883502750497010990016816250073019938116424216992243627885640540146243917417729766175427308287584488697178358633334054077810167031301752837455805786794560600693105049691610361177926625040677161656872021925978397167205975201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							534230fcb7970e41eafe79eafab76f2e9c552789
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (269 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academics.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academics.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bilder.academics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.academics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.prod.academics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.academics.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.academics.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.academics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.academics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academics.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academics.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academics.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163ed12fe1400000403004730450221009e976741571cd3288233b05bfb134a4e3f864f7b3adfef28431053a67b0358da022009610833cd4c512b52c40feef0d237eef240545507c5a1591d8a9be32bfcdf6c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163ed12fe24000004030047304502205b0f48fa78b1ec1f1353fdc7b4188d83a4e0b804b05e104f462afb8e4cf8e5910221008e460a15fdad1bf3b5e775b638f507c79e209f47522a247b3bf0104acaada450
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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