www.sport.kit.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:54:8f:7e:d0:19:6d:f3:3a:5d:e2:49:db:2b:1b:26:84:3e was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sport.kit.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:54:8f:7e:d0:19:6d:f3:3a:5d:e2:49:db:2b:1b:26:84:3e
Serial Number (int): 290111314670196918761979463382469876024382
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bd:e8:29:fa:77:dc:20:ed:96:eb:44:1d:87:30:3a:a3:aa:bb:99:52
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 37:3a:f0:d0:61:3c:ef:a8:e6:71:51:8c:c9:ae:48:70:49:b7:0c:1d
Fingerprint (sha256): 0d:52:2b:b8:88:c7:ae:64:33:3c:1e:a5:87:4b:2d:7c:a2:6f:51:e7:69:b0:98:9b:50:ca:db:2a:0a:6a:e5:e7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sport.kit.edu

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sport.kit.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

applied-psychology.sport.kit.edu
www.biomotioncenter.kit.edu
www.hochschulsport.kit.edu
www.psych.uni-karlsruhe.de
www.sport.kit.edu
www.sport.uni-karlsruhe.de
www.walk-in.kit.edu

Other certificates including the domain name kit.edu

(limited to 100 certificates)
primo.bibliothek.kit.edu
bmc-cdp2-b2.scc.kit.edu
bwlsdf-owncloud1.lsdf.kit.edu
zeus2011.aifb.kit.edu
bvt.blt.kit.edu
www.botanik.kit.edu
surveys.scc.kit.edu
www.kitcard.kit.edu
*.k8s.iism.kit.edu
i43vm-slt.ipd.kit.edu
officeonlineserver.scc.kit.edu
cm.tm.kit.edu
technik.anka.kit.edu
scc-owa-test.scc.kit.edu
sccemc-isi-04-dmgmt.scc.kit.edu
architekturen2019.ipd.kit.edu
www.mensch-und-technik.kit.edu
concerto.ee.kit.edu
www.for583.kit.edu
www.energiezustandsdaten.kit.edu
intern.math.kit.edu
www.soziologie.kit.edu
www.radio.kit.edu
fm-energo.fm.kit.edu
bpe.iesl.kit.edu
test-protokolle.asta.kit.edu
bmc-v1-11.scc.kit.edu
www.kv-reihe.kit.edu
test2-heike.scc.kit.edu
actinides13.ine.kit.edu
code.ipd.kit.edu
pse-virturell.kit.edu
dualcareer.pst.kit.edu
scc-p-iis-intern.scc.kit.edu
umfrage.zml.kit.edu
www.myhealth.kit.edu
www.stg-mit.kit.edu
gitlab.itiv.kit.edu
int-digimat.int.kit.edu
svnserver.informatik.kit.edu
apps.scc.kit.edu
stage-bip.ibcs.kit.edu
www.sport.kit.edu
www-2.mach.kit.edu
derivate.fbv.kit.edu
iam-cloud.iam.kit.edu
itunesu.informatik.kit.edu
www.itt.kit.edu
mediaservice.bibliothek.kit.edu
event.aserv.kit.edu
square.phi.kit.edu
sapwdp02.kit-sap.kit.edu
vcsa-11b.scc.kit.edu
www.mobilitaetssysteme.kit.edu
rll.ipr.kit.edu
bmc-v2-21.scc.kit.edu
doculib-extern.fusion.kit.edu
vbt.ebi.kit.edu
www.afk.kit.edu
www.energiezustandsdaten.kit.edu
e-installation.forschung.kit.edu
koroibot-motion-database.humanoids.kit.edu
socketio1.lectrans.scc.kit.edu
campus.studium.kit.edu
iai-lupoth.iai.kit.edu
www.oew.kit.edu
scc-big-ip-04.scc.kit.edu
www.khys.kit.edu
todo-management.cm.tm.kit.edu
rds-test.bibliothek.kit.edu
i72projekte.tm.uni-karlsruhe.de
captive-portal.scc.kit.edu
scc-spamtrap-always-defer.scc.kit.edu
tts.fm.kit.edu
i58bibdc3.informatik.kit.edu
scc-ilias-05.scc.kit.edu
wsm.scc.kit.edu
mail.fs-fmc.kit.edu
www.wiwi.kit.edu
www.ipf.kit.edu
km.aifb.kit.edu
www.izeus.kit.edu
stage-vbt.ebi.kit.edu
munin.informatik.kit.edu
cloud.aifb.kit.edu
www.gloria.kit.edu
ltipc2007.lti.kit.edu
irans-test.ira.uni-karlsruhe.de
a1proxy.scc.kit.edu
asr.anthropomatik.kit.edu
kit-cd.scc.kit.edu
todo-management.cm.tm.kit.edu
ama-orgapi-prod.scc.kit.edu
formal.iti.kit.edu
ce.ioc.kit.edu
www.bausim2018.kit.edu
fw.scc.kit.edu
www.tvt.kit.edu
bg.ikb.kit.edu
iai-kisgrid2.iai.kit.edu

Certificate

The complete raw certificate details for www.sport.kit.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA62Z94Ngz1k6yKQfYvDwA
TkKuNXkxofl8IFWDFqBrn63owmVfxNXNhKkm0yybNJAHnxwccM9tBT0PgbOZMitF
xy91y3vdS6WTnCdVj9qj6XfKa9tESA9SvtmtYGRb75p7Ad7vHEFWTXq+LxFRhXU5
MbydnNRanMuUMBjXqe+R2YD98v3/UGNwKA95FNRxZXNjBbIqZ2naABS7mR2zvp0A
F3yDli9IaGKVLoxkibagRUqyMaUW13suVfbgTJx1auXSxPzkgC2z0i5ukxS3QWJr
S5m1eBkIucIQqnWPZBzOzDFfq7+vrtuRh1UmN3fb8XYB30WXXuuc+xvm0aC697Tx
XiUTU3AfhESf4XDHVpWuLqDU/Bmmo8DBNYr6n/75x6cohwWIfLjVpsZ2jXtmlYKi
Yt5BjnnboOuKN0ixrD2GR6Qnn8Tatb2iynYp9GWh9ASAwpjwjAS+7v6Li/7bgHct
HMmCp9YaLwKuHUNYVScONuDFY8HRPVaA9ENxD/qgwCZ5vKW/Pcb3QTRcSOtueuFY
Wpqnb5bxc5WNGy6r/zB+dKNME8cgXEC6qRt7OFL8ojF3dYkmHY1a/ZY8zH9QBkUw
QMdpBbTx1wwSMHY7hT3Ezh5ddw7azXSuT3NEeS72laXjJpHXFKlgLaj2SgGRl0Ah
QgD7Uki3TCyx9bgej+4cwJcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290111314670196918761979463382469876024382
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-16 09:01:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-15 09:01:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sport.kit.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 960349675146105284377241071949359861108877935757210238115474492303984917499151981058617753736654442666490748070269113205873573087185352067473998904038624959474826368027077908311094558120245924814065370884720438572992937384521066771642131990934285025172887795388713589501587756868400768749103653818866740005587470570835064051569950319911275323949444002495155738882924005767608736068607068913943059620665726963212559763257992032656072388661700509062495247473927403487938339276197175824671042095551767844503818403398782069155129021520277990468340682881863928682000541538159549932511036268154487581412430005218965297310955367518395301399108977445270672425932679147564187414469240080501865360475571602338506371878230555775886719499380713723136963510393819561397639062550362246861774484910326979404081693229765926376817380958693436215671052936467139407404899131282417798701904418016171723252429872075386580135700135005545733869838923943369885297528455587364225225428240719800833522651251918447452448397370702529466353665213850940489513536174884261005915222292288021737872857557586743585848377793011089134837025393665028558061450610361864710859749549734935366988692047144729610931639289994581092692022770265460012393402142050066422837330071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bde829fa77dc20ed96eb441d87303aa3aabb9952
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (190 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applied-psychology.sport.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biomotioncenter.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hochschulsport.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psych.uni-karlsruhe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sport.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sport.uni-karlsruhe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walk-in.kit.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a2597eb57000004030046304402204eeefaccf55700e233ff70bdf9072d21bf9f81aad046e891aa8dac3dd7b4defa02206f0f29f02a608e87f74bc723b7135263f1625e5d2dc9298545adccbfcd956620007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a2597ecb8000004030047304502201f00fd95949401f39640b332d2be96f9e18211b60e7e4881a4720e4d137119e5022100df4ebf2cd5962dbeb4c973bea6aa520679a7711213890ce00cff71b06b452e00
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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