www.iam.kit.edu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:0d:34:68:70:88:3c:ac:ad:e2:c2:de:7c:28:71:b0:8b:89 was issued on by Let's Encrypt.
With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.iam.kit.edu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:0d:34:68:70:88:3c:ac:ad:e2:c2:de:7c:28:71:b0:8b:89Serial Number (int): 265830190702330726780269632852427763911561
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 38:fb:d2:f7:4b:91:cd:36:ac:62:9e:96:16:a1:d3:d7:d8:68:3e:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 0b:1d:b1:2e:0a:9d:dc:a8:9a:e9:4d:4b:0a:97:d9:a7:46:dc:b7:23
Fingerprint (sha256): 06:d9:6b:2b:eb:25:ab:cc:31:ea:7f:db:cc:f6:b2:17:1c:0f:31:1c:c8:1f:18:4b:c5:07:32:2e:12:53:88:61
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.iam.kit.edu
13
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.iam.kit.edu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
iam.kit.edu
www.iam.kit.edu
www.ikm.kit.edu
www.ikm.uni-karlsruhe.de
www.imf.kit.edu
www.imf1.kit.edu
www.imf2.kit.edu
www.imf3.kit.edu
www.iwe.kit.edu
www.iwe.uni-karlsruhe.de
www.iwk1.kit.edu
www.izbs.kit.edu
www.izbs.uni-karlsruhe.de
www.iam.kit.edu
www.ikm.kit.edu
www.ikm.uni-karlsruhe.de
www.imf.kit.edu
www.imf1.kit.edu
www.imf2.kit.edu
www.imf3.kit.edu
www.iwe.kit.edu
www.iwe.uni-karlsruhe.de
www.iwk1.kit.edu
www.izbs.kit.edu
www.izbs.uni-karlsruhe.de
Other certificates including the domain name kit.edu
(limited to 100 certificates)
primo.bibliothek.kit.edu
bmc-cdp2-b2.scc.kit.edu
bwlsdf-owncloud1.lsdf.kit.edu
zeus2011.aifb.kit.edu
bvt.blt.kit.edu
www.botanik.kit.edu
surveys.scc.kit.edu
www.kitcard.kit.edu
*.k8s.iism.kit.edu
i43vm-slt.ipd.kit.edu
officeonlineserver.scc.kit.edu
cm.tm.kit.edu
technik.anka.kit.edu
scc-owa-test.scc.kit.edu
sccemc-isi-04-dmgmt.scc.kit.edu
architekturen2019.ipd.kit.edu
www.mensch-und-technik.kit.edu
concerto.ee.kit.edu
www.for583.kit.edu
www.energiezustandsdaten.kit.edu
intern.math.kit.edu
www.soziologie.kit.edu
www.radio.kit.edu
fm-energo.fm.kit.edu
bpe.iesl.kit.edu
test-protokolle.asta.kit.edu
bmc-v1-11.scc.kit.edu
www.kv-reihe.kit.edu
test2-heike.scc.kit.edu
actinides13.ine.kit.edu
code.ipd.kit.edu
pse-virturell.kit.edu
dualcareer.pst.kit.edu
scc-p-iis-intern.scc.kit.edu
umfrage.zml.kit.edu
www.myhealth.kit.edu
www.stg-mit.kit.edu
gitlab.itiv.kit.edu
int-digimat.int.kit.edu
svnserver.informatik.kit.edu
apps.scc.kit.edu
stage-bip.ibcs.kit.edu
www.sport.kit.edu
www-2.mach.kit.edu
derivate.fbv.kit.edu
iam-cloud.iam.kit.edu
itunesu.informatik.kit.edu
www.itt.kit.edu
mediaservice.bibliothek.kit.edu
event.aserv.kit.edu
square.phi.kit.edu
sapwdp02.kit-sap.kit.edu
vcsa-11b.scc.kit.edu
www.mobilitaetssysteme.kit.edu
rll.ipr.kit.edu
bmc-v2-21.scc.kit.edu
doculib-extern.fusion.kit.edu
vbt.ebi.kit.edu
www.afk.kit.edu
www.energiezustandsdaten.kit.edu
e-installation.forschung.kit.edu
koroibot-motion-database.humanoids.kit.edu
socketio1.lectrans.scc.kit.edu
campus.studium.kit.edu
iai-lupoth.iai.kit.edu
www.oew.kit.edu
scc-big-ip-04.scc.kit.edu
www.khys.kit.edu
todo-management.cm.tm.kit.edu
rds-test.bibliothek.kit.edu
i72projekte.tm.uni-karlsruhe.de
captive-portal.scc.kit.edu
scc-spamtrap-always-defer.scc.kit.edu
tts.fm.kit.edu
i58bibdc3.informatik.kit.edu
scc-ilias-05.scc.kit.edu
wsm.scc.kit.edu
mail.fs-fmc.kit.edu
www.wiwi.kit.edu
www.ipf.kit.edu
km.aifb.kit.edu
www.izeus.kit.edu
stage-vbt.ebi.kit.edu
munin.informatik.kit.edu
cloud.aifb.kit.edu
www.gloria.kit.edu
ltipc2007.lti.kit.edu
irans-test.ira.uni-karlsruhe.de
a1proxy.scc.kit.edu
asr.anthropomatik.kit.edu
kit-cd.scc.kit.edu
todo-management.cm.tm.kit.edu
ama-orgapi-prod.scc.kit.edu
formal.iti.kit.edu
ce.ioc.kit.edu
www.bausim2018.kit.edu
fw.scc.kit.edu
www.tvt.kit.edu
bg.ikb.kit.edu
iai-kisgrid2.iai.kit.edu
bmc-cdp2-b2.scc.kit.edu
bwlsdf-owncloud1.lsdf.kit.edu
zeus2011.aifb.kit.edu
bvt.blt.kit.edu
www.botanik.kit.edu
surveys.scc.kit.edu
www.kitcard.kit.edu
*.k8s.iism.kit.edu
i43vm-slt.ipd.kit.edu
officeonlineserver.scc.kit.edu
cm.tm.kit.edu
technik.anka.kit.edu
scc-owa-test.scc.kit.edu
sccemc-isi-04-dmgmt.scc.kit.edu
architekturen2019.ipd.kit.edu
www.mensch-und-technik.kit.edu
concerto.ee.kit.edu
www.for583.kit.edu
www.energiezustandsdaten.kit.edu
intern.math.kit.edu
www.soziologie.kit.edu
www.radio.kit.edu
fm-energo.fm.kit.edu
bpe.iesl.kit.edu
test-protokolle.asta.kit.edu
bmc-v1-11.scc.kit.edu
www.kv-reihe.kit.edu
test2-heike.scc.kit.edu
actinides13.ine.kit.edu
code.ipd.kit.edu
pse-virturell.kit.edu
dualcareer.pst.kit.edu
scc-p-iis-intern.scc.kit.edu
umfrage.zml.kit.edu
www.myhealth.kit.edu
www.stg-mit.kit.edu
gitlab.itiv.kit.edu
int-digimat.int.kit.edu
svnserver.informatik.kit.edu
apps.scc.kit.edu
stage-bip.ibcs.kit.edu
www.sport.kit.edu
www-2.mach.kit.edu
derivate.fbv.kit.edu
iam-cloud.iam.kit.edu
itunesu.informatik.kit.edu
www.itt.kit.edu
mediaservice.bibliothek.kit.edu
event.aserv.kit.edu
square.phi.kit.edu
sapwdp02.kit-sap.kit.edu
vcsa-11b.scc.kit.edu
www.mobilitaetssysteme.kit.edu
rll.ipr.kit.edu
bmc-v2-21.scc.kit.edu
doculib-extern.fusion.kit.edu
vbt.ebi.kit.edu
www.afk.kit.edu
www.energiezustandsdaten.kit.edu
e-installation.forschung.kit.edu
koroibot-motion-database.humanoids.kit.edu
socketio1.lectrans.scc.kit.edu
campus.studium.kit.edu
iai-lupoth.iai.kit.edu
www.oew.kit.edu
scc-big-ip-04.scc.kit.edu
www.khys.kit.edu
todo-management.cm.tm.kit.edu
rds-test.bibliothek.kit.edu
i72projekte.tm.uni-karlsruhe.de
captive-portal.scc.kit.edu
scc-spamtrap-always-defer.scc.kit.edu
tts.fm.kit.edu
i58bibdc3.informatik.kit.edu
scc-ilias-05.scc.kit.edu
wsm.scc.kit.edu
mail.fs-fmc.kit.edu
www.wiwi.kit.edu
www.ipf.kit.edu
km.aifb.kit.edu
www.izeus.kit.edu
stage-vbt.ebi.kit.edu
munin.informatik.kit.edu
cloud.aifb.kit.edu
www.gloria.kit.edu
ltipc2007.lti.kit.edu
irans-test.ira.uni-karlsruhe.de
a1proxy.scc.kit.edu
asr.anthropomatik.kit.edu
kit-cd.scc.kit.edu
todo-management.cm.tm.kit.edu
ama-orgapi-prod.scc.kit.edu
formal.iti.kit.edu
ce.ioc.kit.edu
www.bausim2018.kit.edu
fw.scc.kit.edu
www.tvt.kit.edu
bg.ikb.kit.edu
iai-kisgrid2.iai.kit.edu
Certificate
The complete raw certificate details for www.iam.kit.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHVTCCBj2gAwIBAgISAw00aHCIPKyt4sLefChxsIuJMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MDkwOTAxNDVaFw0x OTA3MDgwOTAxNDVaMBoxGDAWBgNVBAMTD3d3dy5pYW0ua2l0LmVkdTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAOq9YRdOtR0dv1TYuaFggnkMS+xYYlFA vbeJyJXQXtdW+ZSJAZKKHTdsZm7llgoyJiNsRDPXgYAlbDhktzLG8fUu97bteFiy leom3fgVZZAOHmyAQyAdWEsrXrUDyZHMB1xAGA+vLyYe0F5Xfa0vLE5jhbiHJYZT 0KxEqHr20Yk9gNqP+WBMg2xU+W3v2msVQO+HnO2pQB0D8t7lqRh3JIX/6JjkOJCe WzuV4NFTag4YW53WSoxgZ6cvShG680EfMHNScMiuxlzSgie+6pgB1LpShUxbH1ED C+tEpw+LuDH8sloOYBwPRBgvKsuYv4igFJ9qhz0udLXlm53EZeBTIaeayLAAaOnb XtPr5UdUlY6lhroJADvwsyQsccV/Xx78JXWoseQl8gbzftk2g6Up2acStUjl0tW1 NsQijTuEK/2Fag4oXxv1EjTx5fNzSm3YwyzVbY8hO2TbvGVRr1qPX4tfHvUKdcJ+ 6CPv+nLrVBY744Ic/WJvstXjC7wt0qwv860UF8NKxckvLy4gysFuTk1uVTC8ZoS5 +WY/IaYQ0Gd89ZZbw5P24Gbcqv5KgIBBFUyd0QKiA4Dh0KHfIhhASIRiqXrKFcYt 4s4wc6UWV/NFTGNqzKvjupo0cOi4UoxGcuKrcL9M5iO1TsYLJlFTfiLrms5H/bOd AXO7IHL/bxUrAgMBAAGjggNjMIIDXzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDj7 0vdLkc02rGKelhah09fYaD79MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wggEFBgNVHREEgf0wgfqCC2lhbS5raXQuZWR1 gg93d3cuaWFtLmtpdC5lZHWCD3d3dy5pa20ua2l0LmVkdYIYd3d3LmlrbS51bmkt a2FybHNydWhlLmRlgg93d3cuaW1mLmtpdC5lZHWCEHd3dy5pbWYxLmtpdC5lZHWC EHd3dy5pbWYyLmtpdC5lZHWCEHd3dy5pbWYzLmtpdC5lZHWCD3d3dy5pd2Uua2l0 LmVkdYIYd3d3Lml3ZS51bmkta2FybHNydWhlLmRlghB3d3cuaXdrMS5raXQuZWR1 ghB3d3cuaXpicy5raXQuZWR1ghl3d3cuaXpicy51bmkta2FybHNydWhlLmRlMBEG CCsGAQUFBwEYBAUwAwIBBTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC AQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AOJpS64m6OlACeiGG7Y7g9Q+5/50iPuk jyiTAZ3d8dv+AAABagGL5KIAAAQDAEYwRAIgE8XGFnfiv2nsdncAPtQk73YNNd8Y X28zc2ip3RSRJtYCIDH2eRBlcJtxPQBN0lO5fXCFwST0m4MvYTv7Nb1b0TQZAHYA KTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFqAYvkpAAABAMARzBF AiB18KFFBIy76fkPn4k+g8OeKTCYOzvPlwT2F6cT58tFDAIhAO+RAnU/pcyVgK46 6iNXaURUVKTpI+QifGEzmTIO+GZbMA0GCSqGSIb3DQEBCwUAA4IBAQABB1k2ViyA zpsUpaYuNZNASkOlUUgHygFWNHJn3RDnjd4Czh6X/eFxKOIvONzHpuNaOxH/d1UQ VSYnzJzSsnxGic6LAQ+vlCQa0BjQGGC4M54SGuVvBs4nyr1cQHeQjZ1a/nB4L5NH k2LrgZXBl0YuMT3VbkPpB3BD47zWQXXvcvhY3QjCy2ra1SpvNhOabBTfTJ5DvJ7S 2Q4MZJ1PvzHidH1O9vPKRq0ctdM97rs+3wISnc69q+B0fJtGTsu2NZpkWXHNvQPO FiJg8zPHjMrrxGBXxJGVck7OlxtDNE1sl9QiDhQVjqxWJuWGYHNxATZtll6uabY1 0EuwFKQhiJ6k -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6r1hF061HR2/VNi5oWCC eQxL7FhiUUC9t4nIldBe11b5lIkBkoodN2xmbuWWCjImI2xEM9eBgCVsOGS3Msbx 9S73tu14WLKV6ibd+BVlkA4ebIBDIB1YSytetQPJkcwHXEAYD68vJh7QXld9rS8s TmOFuIclhlPQrESoevbRiT2A2o/5YEyDbFT5be/aaxVA74ec7alAHQPy3uWpGHck hf/omOQ4kJ5bO5Xg0VNqDhhbndZKjGBnpy9KEbrzQR8wc1JwyK7GXNKCJ77qmAHU ulKFTFsfUQML60SnD4u4MfyyWg5gHA9EGC8qy5i/iKAUn2qHPS50teWbncRl4FMh p5rIsABo6dte0+vlR1SVjqWGugkAO/CzJCxxxX9fHvwldaix5CXyBvN+2TaDpSnZ pxK1SOXS1bU2xCKNO4Qr/YVqDihfG/USNPHl83NKbdjDLNVtjyE7ZNu8ZVGvWo9f i18e9Qp1wn7oI+/6cutUFjvjghz9Ym+y1eMLvC3SrC/zrRQXw0rFyS8vLiDKwW5O TW5VMLxmhLn5Zj8hphDQZ3z1llvDk/bgZtyq/kqAgEEVTJ3RAqIDgOHQod8iGEBI hGKpesoVxi3izjBzpRZX80VMY2rMq+O6mjRw6LhSjEZy4qtwv0zmI7VOxgsmUVN+ Iuuazkf9s50Bc7sgcv9vFSsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 265830190702330726780269632852427763911561 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 09:01:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-08 09:01:45 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.iam.kit.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 957654680597919728605589935174966856341810384138319687063161325293458535942192015986022247809496162796465970444262902376846877207499680991038749797323250293037804220157810544100263410471537543583788612828146872671600318335140889243928406421534385924735091854449543512256763123582352994871602911483811292524397330939083623246328393875991597191717871039853381306915907316264602035319357331539619997899498219859361576488687677418477001646837451925078169749456401442691092374121065374962074793917078952623427666994163090685537546909991687297467128344457521259016707656749249585492348824339993222678915747995181076122013666186879283983633936462651430290310007097634514867492129282988178741254787836164371602162050057651587752985217237141451886511013851014312864361351394607189597975766830419033578317421811905032269490176262078372611389159266688593621001831522862790885353463088882086240871057737013451525881136179606175445416206170191486564409061845889056665321016359050836654582291464288366043457799993543794089387296257441458376103567610250914436957982545942819842170778581849370519475724694879848199911022266641305459222711134578631669445350605046339987323588725536507251276679340872927734665120065244556262260031083805590410572535083 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 38fbd2f74b91cd36ac629e9616a1d3d7d8683efd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (253 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iam.kit.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iam.kit.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikm.kit.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikm.uni-karlsruhe.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imf.kit.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imf1.kit.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imf2.kit.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imf3.kit.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwe.kit.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwe.uni-karlsruhe.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwk1.kit.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.izbs.kit.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.izbs.uni-karlsruhe.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a018be4a20000040300463044022013c5c61677e2bf69ec7677003ed424ef760d35df185f6f337368a9dd149126d6022031f6791065709b713d004dd253b97d7085c124f49b832f613bfb35bd5bd13419007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a018be4a40000040300473045022075f0a145048cbbe9f90f9f893e83c39e2930983b3bcf9704f617a713e7cb450c022100ef9102753fa5cc9580ae3aea235769445454a4e923e4227c613399320ef8665b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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