www.soziologie.kit.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:49:84:a3:d0:2f:86:5b:1e:7c:71:d1:37:4e:e4:90:76:da was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.soziologie.kit.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:84:a3:d0:2f:86:5b:1e:7c:71:d1:37:4e:e4:90:76:da
Serial Number (int): 286353779242847300190074907219802327119578
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5a:de:10:4e:2c:ea:29:49:5d:f6:99:b4:25:0f:36:19:76:4f:07:23
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 80:83:b1:44:91:06:0a:fa:df:9c:e4:65:c3:44:21:3e:51:6b:6c:18
Fingerprint (sha256): 00:66:07:11:9e:8a:aa:51:94:09:99:b6:0d:9b:be:82:31:77:de:9c:b3:89:d6:95:d7:e5:12:0b:82:4b:bf:26

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.soziologie.kit.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.soziologie.kit.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

soziologie.kit.edu
www.soziologie.kit.edu

Other certificates including the domain name kit.edu

(limited to 100 certificates)
primo.bibliothek.kit.edu
bmc-cdp2-b2.scc.kit.edu
bwlsdf-owncloud1.lsdf.kit.edu
zeus2011.aifb.kit.edu
bvt.blt.kit.edu
www.botanik.kit.edu
surveys.scc.kit.edu
www.kitcard.kit.edu
*.k8s.iism.kit.edu
i43vm-slt.ipd.kit.edu
officeonlineserver.scc.kit.edu
cm.tm.kit.edu
technik.anka.kit.edu
scc-owa-test.scc.kit.edu
sccemc-isi-04-dmgmt.scc.kit.edu
architekturen2019.ipd.kit.edu
www.mensch-und-technik.kit.edu
concerto.ee.kit.edu
www.for583.kit.edu
www.energiezustandsdaten.kit.edu
intern.math.kit.edu
www.soziologie.kit.edu
www.radio.kit.edu
fm-energo.fm.kit.edu
bpe.iesl.kit.edu
test-protokolle.asta.kit.edu
bmc-v1-11.scc.kit.edu
www.kv-reihe.kit.edu
test2-heike.scc.kit.edu
actinides13.ine.kit.edu
code.ipd.kit.edu
pse-virturell.kit.edu
dualcareer.pst.kit.edu
scc-p-iis-intern.scc.kit.edu
umfrage.zml.kit.edu
www.myhealth.kit.edu
www.stg-mit.kit.edu
gitlab.itiv.kit.edu
int-digimat.int.kit.edu
svnserver.informatik.kit.edu
apps.scc.kit.edu
stage-bip.ibcs.kit.edu
www.sport.kit.edu
www-2.mach.kit.edu
derivate.fbv.kit.edu
iam-cloud.iam.kit.edu
itunesu.informatik.kit.edu
www.itt.kit.edu
mediaservice.bibliothek.kit.edu
event.aserv.kit.edu
square.phi.kit.edu
sapwdp02.kit-sap.kit.edu
vcsa-11b.scc.kit.edu
www.mobilitaetssysteme.kit.edu
rll.ipr.kit.edu
bmc-v2-21.scc.kit.edu
doculib-extern.fusion.kit.edu
vbt.ebi.kit.edu
www.afk.kit.edu
www.energiezustandsdaten.kit.edu
e-installation.forschung.kit.edu
koroibot-motion-database.humanoids.kit.edu
socketio1.lectrans.scc.kit.edu
campus.studium.kit.edu
iai-lupoth.iai.kit.edu
www.oew.kit.edu
scc-big-ip-04.scc.kit.edu
www.khys.kit.edu
todo-management.cm.tm.kit.edu
rds-test.bibliothek.kit.edu
i72projekte.tm.uni-karlsruhe.de
captive-portal.scc.kit.edu
scc-spamtrap-always-defer.scc.kit.edu
tts.fm.kit.edu
i58bibdc3.informatik.kit.edu
scc-ilias-05.scc.kit.edu
wsm.scc.kit.edu
mail.fs-fmc.kit.edu
www.wiwi.kit.edu
www.ipf.kit.edu
km.aifb.kit.edu
www.izeus.kit.edu
stage-vbt.ebi.kit.edu
munin.informatik.kit.edu
cloud.aifb.kit.edu
www.gloria.kit.edu
ltipc2007.lti.kit.edu
irans-test.ira.uni-karlsruhe.de
a1proxy.scc.kit.edu
asr.anthropomatik.kit.edu
kit-cd.scc.kit.edu
todo-management.cm.tm.kit.edu
ama-orgapi-prod.scc.kit.edu
formal.iti.kit.edu
ce.ioc.kit.edu
www.bausim2018.kit.edu
fw.scc.kit.edu
www.tvt.kit.edu
bg.ikb.kit.edu
iai-kisgrid2.iai.kit.edu

Certificate

The complete raw certificate details for www.soziologie.kit.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286353779242847300190074907219802327119578
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-03 03:32:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-01 03:32:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.soziologie.kit.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 895877288301151385611982471709028786669646975249051898097305937613373536089401828288833569803240874220651633253780915664443448596677041916334673733240020653165575171976182470560004156599585536235971201014166720263770884601318135946820423453326168678214812164972956951661300007935238280370956887498743159462337969197928137417299397874357103286944407773713119240966171761346697622885441708994575136371586801982876864215046606028520561885010282497222682991375634156785390130302392857656471054701027074289588211224703728149196332845520991736451605892419118195809785943119749718224435611223412797134351380094154957645103527011564440894421235448401308041329951176087926066784033416876218190143126489559843430050113075181162546503578348226393434556836839059929394061611638005184870480772314469280535500029207586045415752594608617302353603758732924143991027551330416512207969521704571917033303071791325402915174671200780104772223874435572591802349938259098683582679242517562574178475288139220102909245466535166297801091502210412748238498336992870780153602077425180598847273651373736507032029395615074716564800106409474266227952566043997932475203167923137153398348877786923372624631837885538517450625461454130632821914019118509546284244128061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ade104e2cea29495df699b4250f3619764f0723
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soziologie.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soziologie.kit.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016d8fe47cb60000040300473045022100f220cba5f23279e57e43d21cf396e972587135eb8e15bb129a2b1e46a8a6b77602201133c1dd23bcb0d08d052c8100567bd709cd1c7bc080fa3e31a4c82c3225d15c007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016d8fe47cb10000040300483046022100e3ecb4f807688c906212d1cd18c1d36701ca34081a4ba596eb64aac9aa98ebc2022100f3dff1b6ccc02ce4c89c9dc28fa0b452665d04984cacd9f09fd33be7aa9cc619
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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