bbb.aau.at

- Alpen-Adria-Universität Klagenfurt -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 10:31:51:83:6a:61:3c:98:31:c1:82:a8:c3:41:cb:ef was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Alpen-Adria-Universität Klagenfurt

Organization: Alpen-Adria-Universität Klagenfurt
State / Province: Kärnten
Country: AT

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 10:31:51:83:6a:61:3c:98:31:c1:82:a8:c3:41:cb:ef
Serial Number (int): 21523723765617008669236029903272528879
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 92:74:e7:4c:bd:18:36:bb:89:dd:02:ab:97:9a:07:d3:ff:b1:60:94
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 8a:9c:0d:22:ef:d4:e3:7d:a0:73:3e:c3:b5:b5:3d:20:b0:48:19:ef
Fingerprint (sha256): 12:6d:a7:b8:2d:c7:ba:6b:2c:21:19:24:4c:9b:4c:9a:aa:77:4d:be:65:35:05:63:6c:13:70:00:5d:bc:f9:40

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate bbb.aau.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bbb.aau.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bbb.aau.at
bbb-standby.aau.at

Other certificates including the domain name aau.at

(limited to 100 certificates)
studdorf.aau.at
clouare.aau.at
shib.aau.at
campus-gis.aau.at
scs-iwas.aau.at
qualitative-content-analysis.aau.at
elearning.aau.at
lab-iid.aau.at
dx-workshop.org
seafile.aau.at
survey-test.aau.at
web-ainf.aau.at
dx-workshop.org
survey.aau.at
ae-ainf.aau.at
seafile.aau.at
pervasive.aau.at
www.stat.aau.at
swilt.aau.at
jobs.aau.at
www.itec.aau.at
ub.aau.at
mobile.aau.at
scs-iwas.aau.at
kiss.aau.at
uniclub.aau.at
lab-iid.aau.at
elearning.aau.at
uniclub.aau.at
narrativeencounters.aau.at
rooms.nes.aau.at
lids.aau.at
doku-inf.aau.at
narrativeencounters.aau.at
ameise.aau.at
icn.itec.aau.at
moodle.aau.at
campusplan.aau.at
newsletter.uniclub.aau.at
scs-iwas.aau.at
bscw.aau.at
wiki.nes.aau.at
dia-2018.aau.at
pfl.aau.at
trusteye.nes.aau.at
informatikwerkstatt.aau.at
vulnscan.zid.aau.at
mailbox.itec.aau.at
pfl.aau.at
tomwinkler.nes.aau.at
svn-itec.aau.at
data.aau.at
ius2.aau.at
sepse-iid.aau.at
www-app1.aau.at
www.aau.at
tech.nes.aau.at
moodle-standby.aau.at
kcgl.aau.at
kindergruppe.aau.at
crowdmeteodata.aau.at
data.aau.at
video.aau.at
apollon.aau.at
aau.at
kiss.aau.at
darwin-isys.aau.at
ius.aau.at
indy.nes.aau.at
codex-management.aau.at
litkult1920er.aau.at
trusteye.nes.aau.at
wiki-ainf.aau.at
mmsys2016.itec.aau.at
ahesn.aau.at
informatik-spl.aau.at
me-sci.aau.at
crosmos.nes.aau.at
dia-2018.aau.at
saner.aau.at
uniclub.aau.at
spiderino.nes.aau.at
doku-inf.aau.at
ide.aau.at
tewiki.uni-klu.ac.at
mc40.aau.at
usionline.aau.at
ius.aau.at
survey.aau.at
mooshak.nes.aau.at
www-php1.aau.at
blog.tewi.aau.at
sauron.aau.at
tomwinkler.nes.aau.at
www.edu.aau.at
aesn-api.aau.at
bbb.aau.at
crosmos.nes.aau.at
www.aau.at
vcs-isbi.aau.at

Certificate

The complete raw certificate details for bbb.aau.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21523723765617008669236029903272528879
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kärnten'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Alpen-Adria-Universität Klagenfurt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bbb.aau.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 976171072845038261768736600408528082087543465296110839520528390611304515608449383545761994525209131889291513143610777526171569104390967078644954427491176798467202846402130808543984815821173905044943168222623665660641464357486091139465068629481089838652246482767928491462186439556312496757261885848094496515430645284003610254921976372212492889329485889965476809927810826760231362879196488876395751267987893322605651102778405210522872874594726458480104116973997913602573800568685411581695055741044365166222167388686769252105019127915386723602835434784330797248300774666289747452085617830285183461020743227717835690200274408741476620055346288821980691783384824620876474075253513734571731077558005544962810409095074902309579460738900309035794039681671442746419653992015436301953521287876951591640985543189254783644424879681624447854669361642108695350447155899572921547246286304164623648339383294653215264442770818033153412655324421321885142438374985841047245313287327713791492098799034784809636641727295272944499381729403964773533857214951083982327868684178200062606803755282234119669329158966135132623922749753531327169013242077905687220398600620838543932108789032635801882815455388109926221718795371537214508326250679893389637671139203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9274e74cbd1836bb89dd02ab979a07d3ffb16094
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ae6fe6bce0000040300483046022100eca01c7514c2adb8d4b1d6debfb7f1282c570b44c18e4d4465521d91475b8b770221008e9b41063a2bb1c28ec2f9a317b5a956edfc055e62d9cf0ce4968456aaef48c2007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018ae6fe6c2c0000040300473045022018082da16bf0ca7c9ded3d78f7d5588d7479943cd9ac00ba9359d009d2ba7bc3022100ab89c665bcb8be1b1938ed80ab2f17355750fc2c0f0f0c649a616d466bfc0bd3007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ae6fe6bfd0000040300463044022013b7a4d828a1c4584af10788d313b02b472a5cfa485e46f950622b5e3c67380b0220223ef965a19cc31ce91451544045257058b5109ef743074af59049d26bbeb95a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbb.aau.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbb-standby.aau.at'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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