app.epinetz.de

Issued by R3

About this certificate

This digital certificate with serial number 04:66:df:ee:c2:ee:c2:cf:98:4f:2e:f4:58:c6:bd:4e:b2:68 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=app.epinetz.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:66:df:ee:c2:ee:c2:cf:98:4f:2e:f4:58:c6:bd:4e:b2:68
Serial Number (int): 383455602716393134234022304570181650657896
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c0:12:79:f6:d0:38:93:db:f7:7c:55:11:e7:cb:7d:fd:98:dc:43:80
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a5:68:31:fd:58:db:8f:79:b3:88:c7:01:e1:de:79:62:64:ab:8a:fb
Fingerprint (sha256): be:3d:c1:fe:6b:8d:f3:55:17:ff:bd:ec:86:af:98:b8:a6:d6:3a:95:dc:f2:1f:9c:7b:60:64:c8:56:f5:8d:26

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate app.epinetz.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.epinetz.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.epinetz.de
epinetz.de
epinetz.ifi.uni-heidelberg.de
thabit.ifi.uni-heidelberg.de
trend-tracker.ifi.uni-heidelberg.de
www.epinetz.de

Other certificates including the domain name epinetz.de

(limited to 100 certificates)
app.epinetz.de
app.epinetz.de
app.epinetz.de
app.epinetz.de
app.epinetz.de

Certificate

The complete raw certificate details for app.epinetz.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr1zLO0NFlbnRSlznFba
rGKGQqe79jDHYQaGt9PgwRnuN/BvM7sevXu5KOrrsbT2c3xJ4iH1dyZYlVlHN15J
aBQnRHp+8pzt0p7ARZylW2JjkoWrQW4+qKWUakUT8IY3Q9iFQpI6ztaNb/H5M6jK
FkxV2HGVFEzujkvuN/gCQIiyMExjjpQiFTBO7Se9DZ2xdg7aLBt+Ez6quyiWEd8T
UoTKeUzSZbj9BNDGGGnSow7DtSgUmrMSjBpMsrtXgJ3r3bLvEUUZ9LbPcKtkaXPX
N/heslSUcfT6ep1n9K09ptDWA/I5SxRZk9ercd4ZzPvNra0y18g0LyWuIoEEInj2
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383455602716393134234022304570181650657896
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-29 03:06:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-27 03:06:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.epinetz.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23068792733473178376506963660307352425742366121662187717037311819935457763898323994931549050595415600014591463550737771626316330146353521418789699115383447270475353940210839175300601785658934415517750129884313315965068490060411039571080103877805830003544175000236527421427459962392674366380568119898673264224017276803868932641123241366388114537461012713764147528751807171814595739516395571512798757190134272893020852103360185883694123617948342742445120169999367799345168629485447145135512438006495456817030753897750467713493805350229357976137187294504218575252858505485669622718512475187738176067616040051162035582503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:0|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.epinetz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epinetz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epinetz.ifi.uni-heidelberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thabit.ifi.uni-heidelberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trend-tracker.ifi.uni-heidelberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epinetz.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018865af64b20000040300473045022100af3eb908f2c7208815bf7967f6da433dcea2e1934bfca77473f1e4a7871d696b022041dc2954febf47feafe21baa22bc3a266d5ca394c94882d108524c3e1edf7834007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018865af64d700000403004630440220269dbd86866e0534e36feccd1d3e46121e67ab5afd227671f9ebfda4668bbcf302207e3b1180f81c1e70838647667db85bfbf60f10478d67ea146a1bd2b54e6c346c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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