www.ite.kit.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a5:c4:11:38:4d:1c:40:8a:2b:42:fd:ad:f1:3b:04:2a:af was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ite.kit.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a5:c4:11:38:4d:1c:40:8a:2b:42:fd:ad:f1:3b:04:2a:af
Serial Number (int): 404856352367140521583215202009373129058991
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f3:28:e1:fd:9c:f3:d1:d4:7e:fc:f2:07:3f:2a:16:bb:9d:9d:c1:94
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 80:b7:75:8f:3d:05:33:f3:bf:a8:c1:5e:ca:fc:d4:59:fb:17:0d:25
Fingerprint (sha256): 04:7c:28:c8:41:9f:e0:72:30:fd:6d:ad:e7:d3:84:49:b7:60:9b:a4:bd:ec:43:20:7b:2a:ae:42:f9:da:c9:06

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ite.kit.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ite.kit.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ite.kit.edu
www.ite.kit.edu
www.ite.uni-karlsruhe.de

Other certificates including the domain name kit.edu

(limited to 100 certificates)
primo.bibliothek.kit.edu
bmc-cdp2-b2.scc.kit.edu
bwlsdf-owncloud1.lsdf.kit.edu
zeus2011.aifb.kit.edu
bvt.blt.kit.edu
www.botanik.kit.edu
surveys.scc.kit.edu
www.kitcard.kit.edu
*.k8s.iism.kit.edu
i43vm-slt.ipd.kit.edu
officeonlineserver.scc.kit.edu
cm.tm.kit.edu
technik.anka.kit.edu
scc-owa-test.scc.kit.edu
sccemc-isi-04-dmgmt.scc.kit.edu
architekturen2019.ipd.kit.edu
www.mensch-und-technik.kit.edu
concerto.ee.kit.edu
www.for583.kit.edu
www.energiezustandsdaten.kit.edu
intern.math.kit.edu
www.soziologie.kit.edu
www.radio.kit.edu
fm-energo.fm.kit.edu
bpe.iesl.kit.edu
test-protokolle.asta.kit.edu
bmc-v1-11.scc.kit.edu
www.kv-reihe.kit.edu
test2-heike.scc.kit.edu
actinides13.ine.kit.edu
code.ipd.kit.edu
pse-virturell.kit.edu
dualcareer.pst.kit.edu
scc-p-iis-intern.scc.kit.edu
umfrage.zml.kit.edu
www.myhealth.kit.edu
www.stg-mit.kit.edu
gitlab.itiv.kit.edu
int-digimat.int.kit.edu
svnserver.informatik.kit.edu
apps.scc.kit.edu
stage-bip.ibcs.kit.edu
www.sport.kit.edu
www-2.mach.kit.edu
derivate.fbv.kit.edu
iam-cloud.iam.kit.edu
itunesu.informatik.kit.edu
www.itt.kit.edu
mediaservice.bibliothek.kit.edu
event.aserv.kit.edu
square.phi.kit.edu
sapwdp02.kit-sap.kit.edu
vcsa-11b.scc.kit.edu
www.mobilitaetssysteme.kit.edu
rll.ipr.kit.edu
bmc-v2-21.scc.kit.edu
doculib-extern.fusion.kit.edu
vbt.ebi.kit.edu
www.afk.kit.edu
www.energiezustandsdaten.kit.edu
e-installation.forschung.kit.edu
koroibot-motion-database.humanoids.kit.edu
socketio1.lectrans.scc.kit.edu
campus.studium.kit.edu
iai-lupoth.iai.kit.edu
www.oew.kit.edu
scc-big-ip-04.scc.kit.edu
www.khys.kit.edu
todo-management.cm.tm.kit.edu
rds-test.bibliothek.kit.edu
i72projekte.tm.uni-karlsruhe.de
captive-portal.scc.kit.edu
scc-spamtrap-always-defer.scc.kit.edu
tts.fm.kit.edu
i58bibdc3.informatik.kit.edu
scc-ilias-05.scc.kit.edu
wsm.scc.kit.edu
mail.fs-fmc.kit.edu
www.wiwi.kit.edu
www.ipf.kit.edu
km.aifb.kit.edu
www.izeus.kit.edu
stage-vbt.ebi.kit.edu
munin.informatik.kit.edu
cloud.aifb.kit.edu
www.gloria.kit.edu
ltipc2007.lti.kit.edu
irans-test.ira.uni-karlsruhe.de
a1proxy.scc.kit.edu
asr.anthropomatik.kit.edu
kit-cd.scc.kit.edu
todo-management.cm.tm.kit.edu
ama-orgapi-prod.scc.kit.edu
formal.iti.kit.edu
ce.ioc.kit.edu
www.bausim2018.kit.edu
fw.scc.kit.edu
www.tvt.kit.edu
bg.ikb.kit.edu
iai-kisgrid2.iai.kit.edu

Certificate

The complete raw certificate details for www.ite.kit.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404856352367140521583215202009373129058991
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-12 07:05:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-10 07:05:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ite.kit.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 688798188668439054278849384774550175110954142489506751655557870767713376485516218828880873356254524968472455609161739155002913807723848653938061640285237329475869115835615189884134553506474569529330444411988460119974232977359444899032657095160481826517067468865687518132461345083070765582936174329484929270919606506102800776375895493922446941971616165873449599280497675693505266713425360251169661950573412546027863545151905720483209607496751114616367781654987416572980587189722819612175696389952318989092445562326678999979629118744950255341760920952670559968976527342269135238164061936207796010949754076552934807685930925501393834293490690674227228910276560712538787132823001088143191874648341173374139873921227862973354381232454309863283804452244218888095185985779108155043878340219202471547705018256131578702128943862232841371189036746929525948442950186497643523150375357314611778966975308544767746409393486166269923392871244545995014058926772930204488813433337743592479584865145912320592481387663703117027078996855299753071461193077815591740481583561870368113351139561127947374899767624647913420231974465425338956750724335754095870323031262815044654466449288262797147425753351646461731682500926244884224419154615245459884509356277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f328e1fd9cf3d1d47efcf2073f2a16bb9d9dc194
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ite.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ite.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ite.uni-karlsruhe.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b4ab83faa00000403004730450221009b7e432a44c905b19ae83a5f705a5fc55c16dbc9a7a2bef10e2bbcf665c3acd10220268111aee62afc13806cc7e0848742f7e5064e89bd247d4bf7ef5913ea75130800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b4ab83f47000004030047304502202c9c9922852f429913ec25111e1877d3c5e8cf89bd00271aa60b14bd3c69b9c00221008eeab31e1b74437dec1f2b0a88c2f9b5fa9aa45b3a4beb06df6dc662dd12cb96
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0004407a26ea80de9a9023dc9af2085ab9650a3d63fe1d78a5c1fd5aef977ce240cebb58cdae55bede8706ce03dd9a5bd5c293bf48e0da228ec4f422b05057a3f455d8a7123cdcc74afcc89c86a65668bb6e88231f97254e5ca63ef6c3f1b3571bbdefa6fe8f2534224928af390f7f9b52b954169260ccc0d013640f673a9bef67edae28be029a36fba9e52c2d9e2fb463c7ffc6592d8eaac2f4e8419420778eca90456a33ea4b48d0afc25893e52b27482497e0d087a52085d58179a0327e5d43b07cb1b885577e09d41db2563505910f14ceb1ff9d151a45c8350aa4c474c1bf6ca608801549816f4b45dd7fa1988d0b83da75b96da8c2f1f3e36be297f0ca68