campus-gis.aau.at

- Alpen-Adria Universitaet Klagenfurt -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0c:25:2e:89:a0:10:c8:c8:19:1e:4e:28:a9:2c:6a:2a was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Alpen-Adria Universitaet Klagenfurt

Organization: Alpen-Adria Universitaet Klagenfurt
Locality: Klagenfurt
Country: AT

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:25:2e:89:a0:10:c8:c8:19:1e:4e:28:a9:2c:6a:2a
Serial Number (int): 16143794827822704077139468747132398122
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c2:4e:02:5d:12:fe:9c:cb:6e:eb:6d:6a:4d:2c:aa:12:45:de:c0:61
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): d5:29:9c:1f:88:15:86:42:5f:d3:83:98:9b:f1:37:91:47:06:6c:18
Fingerprint (sha256): 01:65:99:dc:c9:46:2f:82:7d:7c:65:cf:9a:cf:78:7f:9a:5e:7b:4c:50:7d:d0:2c:b0:2e:81:1c:29:b8:11:37

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate campus-gis.aau.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campus-gis.aau.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campus-gis.aau.at
campus-gis.uni-klu.ac.at

Other certificates including the domain name aau.at

(limited to 100 certificates)
studdorf.aau.at
clouare.aau.at
shib.aau.at
campus-gis.aau.at
scs-iwas.aau.at
qualitative-content-analysis.aau.at
elearning.aau.at
lab-iid.aau.at
dx-workshop.org
seafile.aau.at
survey-test.aau.at
web-ainf.aau.at
dx-workshop.org
survey.aau.at
ae-ainf.aau.at
seafile.aau.at
pervasive.aau.at
www.stat.aau.at
swilt.aau.at
jobs.aau.at
www.itec.aau.at
ub.aau.at
mobile.aau.at
scs-iwas.aau.at
kiss.aau.at
uniclub.aau.at
lab-iid.aau.at
elearning.aau.at
uniclub.aau.at
narrativeencounters.aau.at
rooms.nes.aau.at
lids.aau.at
doku-inf.aau.at
narrativeencounters.aau.at
ameise.aau.at
icn.itec.aau.at
moodle.aau.at
campusplan.aau.at
newsletter.uniclub.aau.at
scs-iwas.aau.at
bscw.aau.at
wiki.nes.aau.at
dia-2018.aau.at
pfl.aau.at
trusteye.nes.aau.at
informatikwerkstatt.aau.at
vulnscan.zid.aau.at
mailbox.itec.aau.at
pfl.aau.at
tomwinkler.nes.aau.at
svn-itec.aau.at
data.aau.at
ius2.aau.at
sepse-iid.aau.at
www-app1.aau.at
www.aau.at
tech.nes.aau.at
moodle-standby.aau.at
kcgl.aau.at
kindergruppe.aau.at
crowdmeteodata.aau.at
data.aau.at
video.aau.at
apollon.aau.at
aau.at
kiss.aau.at
darwin-isys.aau.at
ius.aau.at
indy.nes.aau.at
codex-management.aau.at
litkult1920er.aau.at
trusteye.nes.aau.at
wiki-ainf.aau.at
mmsys2016.itec.aau.at
ahesn.aau.at
informatik-spl.aau.at
me-sci.aau.at
crosmos.nes.aau.at
dia-2018.aau.at
saner.aau.at
uniclub.aau.at
spiderino.nes.aau.at
doku-inf.aau.at
ide.aau.at
tewiki.uni-klu.ac.at
mc40.aau.at
usionline.aau.at
ius.aau.at
survey.aau.at
mooshak.nes.aau.at
www-php1.aau.at
blog.tewi.aau.at
sauron.aau.at
tomwinkler.nes.aau.at
www.edu.aau.at
aesn-api.aau.at
bbb.aau.at
crosmos.nes.aau.at
www.aau.at
vcs-isbi.aau.at

Certificate

The complete raw certificate details for campus-gis.aau.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16143794827822704077139468747132398122
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Klagenfurt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alpen-Adria Universitaet Klagenfurt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campus-gis.aau.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 863072356155072509053358560144661227087471517843523550118697183887037421687303599945855597153837976148602936959328431083294160243865800359855795055575993778744269544066646697434731391030176443633247336540715671900016358636874254839888784613409160718214302577808798345191765316710199988539577068480743817703270865347712851518655896696260343341040219525280367151837239892482081429551521372386122840804579352490084774119793919217351222975810346366716951181891294298978823170487810522304852480660094947465686358258799416931509888344008081228198854463636090742224375157003370903132364167968269544561825693209659013507560241439113165177018849898836098048514937306481183144655291052355472520483118704044557997381391017409201996029792185514982779979477252025806176749217521226661765106950628752692262499308536920752308719051552841426590911441438690444462539368336346486538463849254753067446540381620471282312049402337639532522848176943332436585982839547455197530861584740632331383406376940970864038334179628429758351791751879450336941699983880623792237055997356540112872737906801543754369665026782104949416014459676833464050379515427287338453355667140848738605768822555395175492336905086259999266815449346035021305579467331535906941397006081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c24e025d12fe9ccb6eeb6d6a4d2caa1245dec061
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campus-gis.aau.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campus-gis.uni-klu.ac.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005c0af0fe45e2b36643350774718c6647c97dc2269d8b759adadcf5588b32a72f099f67058e89131e7b42060c3cad2d76b7c06a22161b2b76d38fdc5f95a6c8c55cea903086c1d46ceadb735b9621e0941f4546e12e9a098b16cc48c0a2148902a01b17c733bf2243f07740b9e9b14160f01cd33b531070488f78d543d1caef1ab5a71310e76516b2986808b276d3d0d379d5c87f6a047a5529577ecd134acbeef4cef2d3e1365d1432e120f7849e37eed778d39da243f3aa88fd33b0741f0438c229b2f35bf8c35388e6504c099382abd56bd022c2f2744d66dc8f344bb23c25d900bbb36348b6f85f9f6224db5b741a37996f6c9480d0029629195d0d46166f