prod.academics.de

Issued by R3

About this certificate

This digital certificate with serial number 04:39:eb:98:62:93:41:96:f1:9d:df:d7:7d:68:c7:12:c6:02 was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prod.academics.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:39:eb:98:62:93:41:96:f1:9d:df:d7:7d:68:c7:12:c6:02
Serial Number (int): 368158398449009411580814361414910579230210
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a5:29:23:ca:d2:0d:06:f5:cc:91:a0:b9:e4:89:a7:18:63:d1:0b:44
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 61:f3:39:6c:a2:e0:5f:af:b5:aa:a2:22:68:6c:4b:70:38:d6:a9:53
Fingerprint (sha256): b2:ae:d6:f4:20:fb:c1:6e:64:26:41:21:01:bc:1f:a4:eb:2e:cf:99:19:11:c8:c0:0c:6e:2b:aa:80:9d:1e:b8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.academics.de

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.academics.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.api.academics.com
*.api.academics.de
*.api.jobs.zeit.de
*.api.prod.academics.com
*.api.prod.academics.de
*.api.prod.jobs.zeit.de
*.prod.academics.at
*.prod.academics.ch
*.prod.academics.com
*.prod.academics.de
*.prod.jobs.zeit.de
prod.academics.at
prod.academics.ch
prod.academics.com
prod.academics.de
prod.jobs.zeit.de
zeus.academics.de

Other certificates including the domain name academics.de

(limited to 100 certificates)
cmp.channelpartner.de
www.academics.de
kronos.prod.academics.de
prod.academics.de
www.academics.de
staging.academics.de
prod.academics.de
www.academics.de
kronos.prod.academics.de
mms.sp-prod.net
cmp.channelpartner.de
www.academics.de
rhea.stage.academics.de
stage.academics.de
stage.academics.de
www.academics.de
www.academics.de
prod.academics.de
www.academics.de
prod.academics.de
inserieren-test-feature.zeit.de
www.academics.de
prod.academics.de
kronos.prod.academics.de
www.academics.de
inserieren-test-feature.zeit.de
media.academics.de
logos.academics.de
staging.academics.de
*.academics.de
www.academics.de
staging.academics.de
media.academics.de
cmp.academics.at
cmp.academics.at
prod.academics.de
cmp.academics.at
cmp.academics.de
staging.academics.de
media.academics.de
bilder.academics.de
www.academics.de
cmp.academics.at
prod.academics.de
kronos.prod.academics.de
mms.sp-prod.net
kronos.prod.academics.de
kronos.prod.academics.de
prod.academics.de
stage.academics.de
cmp.academics.at
www.academics.de
prod.academics.de
prod.academics.de
media.academics.de
media.academics.de
www.academics.de
www.academics.de
cmp-sp.handelsblatt.com
media.academics.de
www.academics.de
kronos.prod.academics.de
*.academics.de
www.academics.de
www.academics.de
prod.academics.de
dev.academics.de
cmp-sp.handelsblatt.com
cmp.academics.at
www.academics.de
inserieren.academics.de
dev.academics.de
stage.academics.de
dev.academics.de
inserieren-test-feature.zeit.de
monitoring.academics.de
www.academics.de
prod.academics.de
prod.academics.de
athene.dev.academics.de
cmp.channelpartner.de
media.academics.de
athene.dev.academics.de
www.academics.de
cmp.channelpartner.de
cmp.channelpartner.de
media.academics.de
cmp.academics.at
zeus.dev.academics.de
cmp.infoworld.com
www.academics.de
prod.academics.de
cmp.academics.at
media.academics.de
stage.academics.de
cmp-sp.handelsblatt.com
cmp.channelpartner.de
staging.academics.de
staging.academics.de
dev.academics.de

Certificate

The complete raw certificate details for prod.academics.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ECIaSLcwCRKuJSgjsoe
GApTLthiEhYiGatg1iP4shyPyS10ExkrgfxkhxSx1UdBmNf1olFVZhG8of6J6TOq
gxNwwvNL0/LSxPqcnZB3vX2Ac5oofjZLmPtAKWLqIJ4eiml/KAtUJh4QNH5KUgnG
2sdNitcXFmqBhQMCsixt0xiInrAtYQepoRPDxgt3Jx1AMSGXBOzsCBVogF2ujPHt
up/sHTQgRwAdaOePjA/gnlL6AbkCEwta/6AS1DhbNLVgXm7Ut0LsmGytHnHSpoB+
oXRzer5uAttxhJZga/htgb0oOQIW9hber5KMmda048ju0iDTmT/AHwwcMh3rhciu
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368158398449009411580814361414910579230210
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 11:45:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 11:45:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.academics.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30329015528319864593838988429345352776773849468199274994308929972460657925609290388105818743092494470980504693292715477166787125447660831665893932437529322809987258311460931826836293023844971731686400721357534766561298845923640207642062200769053771838122712593265732819638959612038910224536877753220151497020065986711054988462809351861938247728471312060470858514080842553268045402309683183635191070336970523468901592631327319377749861255863884965106046892842490502409257098915751360113298239086310685644860304582394472391663497573477277990999156141305575520084521714467036638876989024237120765596168822231387827908231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a52923cad20d06f5cc91a0b9e489a71863d10b44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.academics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.academics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.jobs.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.prod.academics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.prod.academics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.prod.jobs.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.academics.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.academics.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.academics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.academics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.jobs.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.academics.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.academics.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.academics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.academics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.jobs.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeus.academics.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b4d1ee07a0000040300483046022100afd7e92f95e240eab70af9bdf892341b543cccd09733ae43ad1b9d708497cb3e022100abb792802f4aa52514267f1c5cb9909f71381ec3bae4efe497b814232e75569a0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b4d1ee06f0000040300483046022100bdd6f7a2cdea014ecbc2ff6ae7752cd5918feaec545019f0329c2b23e34274b0022100aa328f5f77b0d469da260ab494d5a73e412b65898d8104339f95aa0ae56a4b79
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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