www.its.kit.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:e4:3a:a3:92:a9:f3:8c:ff:7b:06:ce:f1:51:9c:02:4e:b1 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.its.kit.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e4:3a:a3:92:a9:f3:8c:ff:7b:06:ce:f1:51:9c:02:4e:b1
Serial Number (int): 426111467927855159465205660881931965976241
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a9:6d:28:54:e8:19:12:90:0b:86:aa:e0:1d:8d:d4:c5:5d:94:cb:ff
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 45:e8:81:03:96:13:27:9d:2a:20:e0:33:a7:aa:46:92:61:4e:44:33
Fingerprint (sha256): 0e:df:94:b6:87:89:5c:07:92:a1:7b:61:e6:78:4a:fe:d2:c4:9a:ae:9d:db:46:d0:9b:75:88:03:f2:44:6c:1c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.its.kit.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.its.kit.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

its.kit.edu
www.its.kit.edu
www.its.uni-karlsruhe.de

Other certificates including the domain name kit.edu

(limited to 100 certificates)
primo.bibliothek.kit.edu
bmc-cdp2-b2.scc.kit.edu
bwlsdf-owncloud1.lsdf.kit.edu
zeus2011.aifb.kit.edu
bvt.blt.kit.edu
www.botanik.kit.edu
surveys.scc.kit.edu
www.kitcard.kit.edu
*.k8s.iism.kit.edu
i43vm-slt.ipd.kit.edu
officeonlineserver.scc.kit.edu
cm.tm.kit.edu
technik.anka.kit.edu
scc-owa-test.scc.kit.edu
sccemc-isi-04-dmgmt.scc.kit.edu
architekturen2019.ipd.kit.edu
www.mensch-und-technik.kit.edu
concerto.ee.kit.edu
www.for583.kit.edu
www.energiezustandsdaten.kit.edu
intern.math.kit.edu
www.soziologie.kit.edu
www.radio.kit.edu
fm-energo.fm.kit.edu
bpe.iesl.kit.edu
test-protokolle.asta.kit.edu
bmc-v1-11.scc.kit.edu
www.kv-reihe.kit.edu
test2-heike.scc.kit.edu
actinides13.ine.kit.edu
code.ipd.kit.edu
pse-virturell.kit.edu
dualcareer.pst.kit.edu
scc-p-iis-intern.scc.kit.edu
umfrage.zml.kit.edu
www.myhealth.kit.edu
www.stg-mit.kit.edu
gitlab.itiv.kit.edu
int-digimat.int.kit.edu
svnserver.informatik.kit.edu
apps.scc.kit.edu
stage-bip.ibcs.kit.edu
www.sport.kit.edu
www-2.mach.kit.edu
derivate.fbv.kit.edu
iam-cloud.iam.kit.edu
itunesu.informatik.kit.edu
www.itt.kit.edu
mediaservice.bibliothek.kit.edu
event.aserv.kit.edu
square.phi.kit.edu
sapwdp02.kit-sap.kit.edu
vcsa-11b.scc.kit.edu
www.mobilitaetssysteme.kit.edu
rll.ipr.kit.edu
bmc-v2-21.scc.kit.edu
doculib-extern.fusion.kit.edu
vbt.ebi.kit.edu
www.afk.kit.edu
www.energiezustandsdaten.kit.edu
e-installation.forschung.kit.edu
koroibot-motion-database.humanoids.kit.edu
socketio1.lectrans.scc.kit.edu
campus.studium.kit.edu
iai-lupoth.iai.kit.edu
www.oew.kit.edu
scc-big-ip-04.scc.kit.edu
www.khys.kit.edu
todo-management.cm.tm.kit.edu
rds-test.bibliothek.kit.edu
i72projekte.tm.uni-karlsruhe.de
captive-portal.scc.kit.edu
scc-spamtrap-always-defer.scc.kit.edu
tts.fm.kit.edu
i58bibdc3.informatik.kit.edu
scc-ilias-05.scc.kit.edu
wsm.scc.kit.edu
mail.fs-fmc.kit.edu
www.wiwi.kit.edu
www.ipf.kit.edu
km.aifb.kit.edu
www.izeus.kit.edu
stage-vbt.ebi.kit.edu
munin.informatik.kit.edu
cloud.aifb.kit.edu
www.gloria.kit.edu
ltipc2007.lti.kit.edu
irans-test.ira.uni-karlsruhe.de
a1proxy.scc.kit.edu
asr.anthropomatik.kit.edu
kit-cd.scc.kit.edu
todo-management.cm.tm.kit.edu
ama-orgapi-prod.scc.kit.edu
formal.iti.kit.edu
ce.ioc.kit.edu
www.bausim2018.kit.edu
fw.scc.kit.edu
www.tvt.kit.edu
bg.ikb.kit.edu
iai-kisgrid2.iai.kit.edu

Certificate

The complete raw certificate details for www.its.kit.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA42AwHMRy25jYy3G1JHt3
rP6gv6WBCkszU7KR9FTNreg1F3qSJ6Ha39k/7CuIgUnJ19je8n9eMs6OIziX3USX
Srr6hfQ0zaHovNwlXfJDgu1Bfq5dOn5ub1QsGnyiLcApjZQrh5IUl7+pj5T8JwFD
ySdpnxHmuCsUXKmmhZErZa9sTN3vmWMjluzX4bHmC1/hpMKWRnT9xy9VqYoN+93V
uvb7JCKAg3/ZzH1S1b5LJ1t0N6g/RybrGjbXm3o2gCZFhFUpQ6UTabkNOrNxmSpa
/3WEOiDAvO+quEkN3BOlu5/HiBqmMKLSkXTYfagBfrICFcoNwSLWJdAM4bip7EUp
pcY4Ba/7HW2wsoV404ZlbgmDO2nEf1mS8FSdeexCi9OG/2LJj9qLQPhNxTmG9oHU
5AdcXdPmytSW6qKgPNZ2lUT0bMGsh13u06SYw0v+tpuM8PDe9JDz7PpQbDj4hSyS
mm6evF14nuaO1o+HZeoEEFiuRg0wLagjn/uJf5e9OvzX3CFrfAO++K8HxMigurSU
oqpYqVUdtrrrPkYzmNCc3RjzWZkrwOs6AWVavuRcK/3jvbTu+H/nFQEbF+/zEk61
D0TOQPl+aEnwCMaaUTR1Eb4hKspedNtcf0Ci0a9lHvExeqVvKfUEgzVD4+DOE10v
mztQL7v9YZedmiyidylBR58CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426111467927855159465205660881931965976241
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-12 21:41:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-10 21:41:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.its.kit.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 927612064981874533701047518209775289964755693963359352418525943348915360570882726917651527239683182467894081080045540245391033007701736607876150496475678893945025743076351372700790757859701681696466474070652097607486504225875181096972846666082216037985090481695160907137919664363546651914476555380905575467780710076704774850131795708219412721822935241835877079209923126258896703960170507790207833421375824365754577149974276119018058392841541677985384982064493400667121596863249004678278878983807977074483529535922966362182334718926869547239357368279398550649234899253705281985873325618958242416612592433411669288642209437706408623165750310184985725795327768202061551493625608092597581789009201320562093768938689839915866648304830118279647838952591396309164530508723862464822219959425472961384585081133984278678361666888506130673020728021464139774741277143887851572765668832841166052472020302741724185853928354138615349846561462350772866729120776425106564750020100386970171175111778019290628151066492663482124570721253434436465038982129335517721574758817842987018491149808802005003975544637242696468475197702420394089468420412627065599033197377535974053193040158727475925015120859498717072374948395949971147900817765062000887224944543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a96d2854e81912900b86aae01d8dd4c55d94cbff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'its.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.its.kit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.its.uni-karlsruhe.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188122029240000040300483046022100cc7fe07a9c8f95fffb58ffff0ffa44efb390f4bc6e7c96ee297ff12e53d4742a022100a80b8fbfeebf56295e795a7faf3320cc9814a867816c9a03bf6da4ec634af76c007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000188122029100000040300483046022100e3cb87e92841eab96b553dffed08511a533f22660cede4f7959039252eb3b2a10221009af40ed0f3481700117e36c815a5982e124b5f31fc539b3487de621a141d51ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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