fsmed-koeln.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0c:c6:50:ea:dc:b1:71:58:76:0f:0a:d6:57:30:1d:10:15 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fsmed-koeln.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0c:c6:50:ea:dc:b1:71:58:76:0f:0a:d6:57:30:1d:10:15
Serial Number (int): 265683853488815056511208508246475348447253
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d8:b3:9e:8b:11:08:a6:63:f1:4e:98:aa:c1:2d:36:3c:2d:13:42:4f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1c:b0:74:02:90:4b:74:f3:14:77:cb:74:56:34:aa:6a:03:4a:f7:09
Fingerprint (sha256): f7:3b:a3:a9:14:bb:b6:b5:8a:a3:dc:4b:19:9e:23:2e:02:16:38:be:d2:e3:cf:47:f1:f9:8b:e6:d9:45:f4:fd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fsmed-koeln.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fsmed-koeln.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fsmed-koeln.de
fsmed.uni-koeln.de
www.fsmed-koeln.de
www.fsmed.uni-koeln.de

Other certificates including the domain name fsmed-koeln.de

(limited to 100 certificates)
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de
fsmed-koeln.de

Certificate

The complete raw certificate details for fsmed-koeln.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265683853488815056511208508246475348447253
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-23 20:24:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 20:24:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fsmed-koeln.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 785111747371090169265396535200284473329709717599433985392758110514550558501265763396298364521100338190710504269587702504190955890559246014934904869848587025171995458497251663241494979365812818339705876878744591756517140325230840806416179884352035670173821067204923021598053422536293533220611576112651671942963492358581683912062999038576359270590848759668556949071247394693894980833181081253933490292194209045507258530325734946094461698370266272550927072302622233864467802245063323867069886003012095714874149937743931679968594536416657427802176819740132228808038181030651475845675050738412513189753782153501865225444343725442780167732216928198582000258439794294244595227377611105009776209962280989545721862118119870534432777331283867517729868633894828729990881908663644112953609591550946225774373240583444681429919507353785446228404641062187632472581935196235358042838733458897571041467841535501074409043426410922624641972947405585601885007385162394955038902052375942746563521459828822925201957017754323423707217411042532752057552639902011567182141311606352260260682100950346290480672580651719456211295632755571331333617484277944901576349728204907119942256671535894621711134823366180090394294095465189898151231934581165546927143863467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8b39e8b1108a663f14e98aac12d363c2d13424f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsmed-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsmed.uni-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsmed-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsmed.uni-koeln.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001687c997496000004030046304402206d9faf9b3039ad581ff59fcdabd3a4674cb66a4e1db1bd84c96ebb90baacb232022051343d98bb416a964efc1353ac987dd0848b0bd276a53d1988cf2ab6fa0fc13800750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001687c99747b00000403004630440220762a0bb681051a73b5cc70ea72a5ca2d0421a9e151e1314651ae0e5c43ab4e5b02200ab52fc8355903a04f716659094c04dcd2eb2301dfffa77825cac1df98322f04
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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