DV SSL/TLS Certificate for wifi.hfk-bremen.de

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the wifi.hfk-bremen.de DV SSL/TLS Certificate

This certificate with serial number 05:bd:fb:af:48:3c:8c:93:62:2a:9b:0f:a3:43:c1:cc:8e:58 for wifi.hfk-bremen.de was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for wifi.hfk-bremen.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:bd:fb:af:48:3c:8c:93:62:2a:9b:0f:a3:43:c1:cc:8e:58
Serial Number (int): 500209343350881547597455601067213334548056
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 1c:21:1b:b8:28:9e:fa:6b:81:0c:21:64:33:0e:5c:26:3c:07:10:fc
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 81:95:14:f6:95:1e:e4:8c:51:d7:5b:f8:b5:15:39:f1:ae:4e:49:84
Fingerprint (SHA-256): 5e:31:91:e2:25:c5:47:bf:86:8f:0f:22:c0:73:90:6d:32:c4:1b:23:16:e0:53:d8:36:8f:bd:5b:a9:d0:22:35

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/89.crl

Check the revocation status for certificate wifi.hfk-bremen.de
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for wifi.hfk-bremen.de

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

wifi.hfk-bremen.de

X.509 Certificate

The complete raw X.509 certificate details for wifi.hfk-bremen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Y46Rws2jppVHkthqHSd
N+cCKa050ZUrf0QZUeWEE/6DX0ld+D+tpHGofAaT1vlZOBeXB8yesPMt8b9Uo0ZK
okFluZehfwXMGl43PYOtmVWrgeQDVSfgTlMfkKfsXvbidbiYfvawveQ/uTQP+T4e
oF91rw5VEyD7zQl4jqjRtgpwDzOl9CepCCdBSiq9+viZibpBqiVO6DiFxVY881+F
PKGIasXCbXxHCumPbxVOEPNo589Q+VzrmuemGUoqS2uW0Krmrlk1F5l27qviE7eU
sriCHZ5R+SjQfmT52AnkarDf/y3EMDvBIfuLaaNFM3WA7a1mO7pRzBq3alp8v5k/
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 500209343350881547597455601067213334548056
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-06 04:51:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-04 04:51:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wifi.hfk-bremen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28473753683842961069547094929531395023043451766601037460484026669207024946133150605021046890106127451600779437125528582647719581511750710150906685471403887122180213484808511026691783831428490727406810606030208654577018750374233137240935090397513650582558072980823512996907375867837310843405368600526176233925999964001008280658999913989843826630925303846827850346363231343665353538908010586292299313892681925669200249503661926035217494027834640471729683454246634976464431743194108496687007362095575739909458926603882050711314297265109017823341405068577601769573338076674228281507897913801144621027573044003152418389807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c211bb8289efa6b810c2164330e5c263c0710fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifi.hfk-bremen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/89.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe00000019743ca368c0000040300473045022012d6551cefc86cb7ce184c561b53b7f6b83d15202ba94c1666df6ebc4bb7b6e7022100cffa256f76f4476dcf10cd4f745466da4c14acd4486c403063ec5b5dd9de5680007700dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a0000019743ca36d90000040300483046022100e6bd0aae4dbfb576ebcb760cdf9e4639452bb88329082dccb69b6e994b985561022100ec56722c77585e38251db535fd49d93bf7915ddce137b5b7e3fe40b7a6f9bf04
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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