www.iam.kit.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0d:34:68:70:88:3c:ac:ad:e2:c2:de:7c:28:71:b0:8b:89 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.iam.kit.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0d:34:68:70:88:3c:ac:ad:e2:c2:de:7c:28:71:b0:8b:89
Serial Number (int): 265830190702330726780269632852427763911561
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 38:fb:d2:f7:4b:91:cd:36:ac:62:9e:96:16:a1:d3:d7:d8:68:3e:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:1d:b1:2e:0a:9d:dc:a8:9a:e9:4d:4b:0a:97:d9:a7:46:dc:b7:23
Fingerprint (sha256): 06:d9:6b:2b:eb:25:ab:cc:31:ea:7f:db:cc:f6:b2:17:1c:0f:31:1c:c8:1f:18:4b:c5:07:32:2e:12:53:88:61

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.iam.kit.edu

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.iam.kit.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

iam.kit.edu
www.iam.kit.edu
www.ikm.kit.edu
www.ikm.uni-karlsruhe.de
www.imf.kit.edu
www.imf1.kit.edu
www.imf2.kit.edu
www.imf3.kit.edu
www.iwe.kit.edu
www.iwe.uni-karlsruhe.de
www.iwk1.kit.edu
www.izbs.kit.edu
www.izbs.uni-karlsruhe.de

Other certificates including the domain name kit.edu

(limited to 100 certificates)
primo.bibliothek.kit.edu
bmc-cdp2-b2.scc.kit.edu
bwlsdf-owncloud1.lsdf.kit.edu
zeus2011.aifb.kit.edu
bvt.blt.kit.edu
www.botanik.kit.edu
surveys.scc.kit.edu
www.kitcard.kit.edu
*.k8s.iism.kit.edu
i43vm-slt.ipd.kit.edu
officeonlineserver.scc.kit.edu
cm.tm.kit.edu
technik.anka.kit.edu
scc-owa-test.scc.kit.edu
sccemc-isi-04-dmgmt.scc.kit.edu
architekturen2019.ipd.kit.edu
www.mensch-und-technik.kit.edu
concerto.ee.kit.edu
www.for583.kit.edu
www.energiezustandsdaten.kit.edu
intern.math.kit.edu
www.soziologie.kit.edu
www.radio.kit.edu
fm-energo.fm.kit.edu
bpe.iesl.kit.edu
test-protokolle.asta.kit.edu
bmc-v1-11.scc.kit.edu
www.kv-reihe.kit.edu
test2-heike.scc.kit.edu
actinides13.ine.kit.edu
code.ipd.kit.edu
pse-virturell.kit.edu
dualcareer.pst.kit.edu
scc-p-iis-intern.scc.kit.edu
umfrage.zml.kit.edu
www.myhealth.kit.edu
www.stg-mit.kit.edu
gitlab.itiv.kit.edu
int-digimat.int.kit.edu
svnserver.informatik.kit.edu
apps.scc.kit.edu
stage-bip.ibcs.kit.edu
www.sport.kit.edu
www-2.mach.kit.edu
derivate.fbv.kit.edu
iam-cloud.iam.kit.edu
itunesu.informatik.kit.edu
www.itt.kit.edu
mediaservice.bibliothek.kit.edu
event.aserv.kit.edu
square.phi.kit.edu
sapwdp02.kit-sap.kit.edu
vcsa-11b.scc.kit.edu
www.mobilitaetssysteme.kit.edu
rll.ipr.kit.edu
bmc-v2-21.scc.kit.edu
doculib-extern.fusion.kit.edu
vbt.ebi.kit.edu
www.afk.kit.edu
www.energiezustandsdaten.kit.edu
e-installation.forschung.kit.edu
koroibot-motion-database.humanoids.kit.edu
socketio1.lectrans.scc.kit.edu
campus.studium.kit.edu
iai-lupoth.iai.kit.edu
www.oew.kit.edu
scc-big-ip-04.scc.kit.edu
www.khys.kit.edu
todo-management.cm.tm.kit.edu
rds-test.bibliothek.kit.edu
i72projekte.tm.uni-karlsruhe.de
captive-portal.scc.kit.edu
scc-spamtrap-always-defer.scc.kit.edu
tts.fm.kit.edu
i58bibdc3.informatik.kit.edu
scc-ilias-05.scc.kit.edu
wsm.scc.kit.edu
mail.fs-fmc.kit.edu
www.wiwi.kit.edu
www.ipf.kit.edu
km.aifb.kit.edu
www.izeus.kit.edu
stage-vbt.ebi.kit.edu
munin.informatik.kit.edu
cloud.aifb.kit.edu
www.gloria.kit.edu
ltipc2007.lti.kit.edu
irans-test.ira.uni-karlsruhe.de
a1proxy.scc.kit.edu
asr.anthropomatik.kit.edu
kit-cd.scc.kit.edu
todo-management.cm.tm.kit.edu
ama-orgapi-prod.scc.kit.edu
formal.iti.kit.edu
ce.ioc.kit.edu
www.bausim2018.kit.edu
fw.scc.kit.edu
www.tvt.kit.edu
bg.ikb.kit.edu
iai-kisgrid2.iai.kit.edu

Certificate

The complete raw certificate details for www.iam.kit.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265830190702330726780269632852427763911561
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 09:01:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-08 09:01:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.iam.kit.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 957654680597919728605589935174966856341810384138319687063161325293458535942192015986022247809496162796465970444262902376846877207499680991038749797323250293037804220157810544100263410471537543583788612828146872671600318335140889243928406421534385924735091854449543512256763123582352994871602911483811292524397330939083623246328393875991597191717871039853381306915907316264602035319357331539619997899498219859361576488687677418477001646837451925078169749456401442691092374121065374962074793917078952623427666994163090685537546909991687297467128344457521259016707656749249585492348824339993222678915747995181076122013666186879283983633936462651430290310007097634514867492129282988178741254787836164371602162050057651587752985217237141451886511013851014312864361351394607189597975766830419033578317421811905032269490176262078372611389159266688593621001831522862790885353463088882086240871057737013451525881136179606175445416206170191486564409061845889056665321016359050836654582291464288366043457799993543794089387296257441458376103567610250914436957982545942819842170778581849370519475724694879848199911022266641305459222711134578631669445350605046339987323588725536507251276679340872927734665120065244556262260031083805590410572535083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38fbd2f74b91cd36ac629e9616a1d3d7d8683efd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (253 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iam.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iam.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikm.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikm.uni-karlsruhe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imf.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imf1.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imf2.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imf3.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwe.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwe.uni-karlsruhe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwk1.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.izbs.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.izbs.uni-karlsruhe.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a018be4a20000040300463044022013c5c61677e2bf69ec7677003ed424ef760d35df185f6f337368a9dd149126d6022031f6791065709b713d004dd253b97d7085c124f49b832f613bfb35bd5bd13419007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a018be4a40000040300473045022075f0a145048cbbe9f90f9f893e83c39e2930983b3bcf9704f617a713e7cb450c022100ef9102753fa5cc9580ae3aea235769445454a4e923e4227c613399320ef8665b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0001075936562c80ce9b14a5a62e3593404a43a5514807ca0156347267dd10e78dde02ce1e97fde17128e22f38dcc7a6e35a3b11ff775510552627cc9cd2b27c4689ce8b010faf94241ad018d01860b8339e121ae56f06ce27cabd5c4077908d9d5afe70782f93479362eb8195c197462e313dd56e43e9077043e3bcd64175ef72f858dd08c2cb6adad52a6f36139a6c14df4c9e43bc9ed2d90e0c649d4fbf31e2747d4ef6f3ca46ad1cb5d33deebb3edf02129dcebdabe0747c9b464ecbb6359a645971cdbd03ce162260f333c78ccaebc46057c49195724ece971b43344d6c97d4220e14158eac5626e58660737101366d965eae69b635d04bb014a421889ea4