www.tu-sport.de

- Technische Universitaet Berlin -

Issued by TUB-CA

About this certificate

This digital certificate with serial number 19:02:b4:3c:08:9a:dd was issued on by Technische Universitaet Berlin.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment ContentCommitment KeyEncipherment DigitalSignature] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Technische Universitaet Berlin

Organization: Technische Universitaet Berlin
Organization unit: ZEH
State / Province: Berlin
Locality: Berlin
Country: DE

Technische Universitaet Berlin

Organization: Technische Universitaet Berlin
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 19:02:b4:3c:08:9a:dd
Serial Number (int): 7039847542332125
Serial Number lenght: 53 bits, 7 octets

SubjectKeyId: 30:e1:c5:18:8a:6d:bd:db:5a:c8:af:a3:04:84:c2:32:93:41:f0:21
AuthorityKeyId: 23:32:42:9e:fe:62:42:4e:fb:4e:d0:17:9b:78:e7:ed:8a:8c:3e:78

Fingerprint (sha1): ff:04:59:62:a8:60:2a:a9:be:1d:30:7b:65:85:2f:3e:fc:d2:8a:f3
Fingerprint (sha256): 00:cc:da:a6:e2:c6:0e:ac:46:f8:7e:56:31:b1:86:10:71:79:08:40:3d:bf:36:e3:92:30:a1:b9:c4:ee:34:8f

Issuing Certificate URL: http://cdp1.pca.dfn.de/tu-berlin-ca/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/tu-berlin-ca/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/tu-berlin-ca/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/tu-berlin-ca/pub/crl/cacrl.crl

Check the revocation status for certificate www.tu-sport.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tu-sport.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tu-sport.de
www.tu-sport.de
zeh1.service.tu-berlin.de

Other certificates including the domain name tu-sport.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.tu-sport.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7039847542332125
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technische Universitaet Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TUB-CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-17 12:40:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 23:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Technische Universitaet Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ZEH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.tu-sport.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 755103774979034712199419501707721104092042945328885972705429134234137588461448701371419103444660930328678470710088284559647149220078084295186040039159356659487386701488914586746840048897041545204035038801220865064729074708165061471936976789089975644467742938844059406647313763182142281069529386251234221759739572261298120419796628887511657132711464869986446293535335625989894741855893512132357629274800119536634761165308539924704331254222329426440315526419518594900263086304339457887392198566225433648677946550357384240852599652144651139643666100476398591077706489751874379189033467160199915656692053517620968950529546889756312753710800803356910363371949574049983607528511973040351933199375147073335670619836714447519883179383351024312515255960953854854436972746584891265286293884436130786205583498386447513992173240639856227706944295591378093549404639989768273506428565437331082552496045794372413619481043431964321197018521122988931660921751561688652511995884786100681070888122630122579444780086991611677681852490242873191782503245327974339770353225780686575882201151592874076022588572429947494563795207128821002915713105193869333901290026827855779101604007897115251299188701643899330552935316470977346165772789431327986166033443989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30e1c5188a6dbddb5ac8afa30484c2329341f021
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2332429efe62424efb4ed0179b78e7ed8a8c3e78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tu-sport.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tu-sport.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeh1.service.tu-berlin.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/tu-berlin-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/tu-berlin-ca/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (198 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/tu-berlin-ca/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/tu-berlin-ca/pub/cacert/cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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