registracija.ktk.lt

- Kauno technikos kolegija -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 09:3d:db:5f:d0:51:76:6e:3b:ea:1b:7b:6a:42:3c:4a was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kauno technikos kolegija

Organization: Kauno technikos kolegija
Organization unit: IT Skyrius
Locality: Kaunas
Country: LT

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 09:3d:db:5f:d0:51:76:6e:3b:ea:1b:7b:6a:42:3c:4a
Serial Number (int): 12284231509284870219342219047069695050
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f2:b4:87:17:fe:14:9a:20:98:3f:c3:ef:6a:80:45:d5:2c:6b:14:c9
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 97:7d:b5:2e:ee:43:10:06:12:3e:dc:1f:0c:e6:7c:37:9d:be:f3:e4
Fingerprint (sha256): 6a:aa:38:ae:6a:89:c4:64:bf:a3:9a:0a:4f:6f:35:11:10:59:c9:f9:39:2f:73:ca:a1:b2:3d:78:81:5d:94:55

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate registracija.ktk.lt

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for registracija.ktk.lt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

registracija.ktk.lt
personalas.ktk.lt

Other certificates including the domain name ktk.lt

(limited to 100 certificates)

Certificate

The complete raw certificate details for registracija.ktk.lt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA038177WIKZy8H35Wc+E1
sGw6c26J3TfvWvDsPQbvDifB5gCHfll9yrxepFzfqD3uA2SY/7RfEP+rg0OcOgDh
jfwvD0TD1bq4ny03jzpJuj0u+L/aKlilwqdNNWiues1D+Ysv0VZhFGjO2R8XCZTR
nPRAc/jxQstTnMjESgUxH9fbiCWpmsJgEWZc+zU9Hfi1xMIK8oRIJGRUJHKdrWCV
lYPI1auZoIVWER4UFYiUDFJ7qBE42e6wLYqbdatQIQhROKYSW6JBeEOmsJnp4/XH
Xh7laT9pMJdfZgDXSRn2/VfXWAxHXRBOUBbmtoDYhXwxx6Z33J6rJZPR2oPBuAV4
3smJZsG8q5dH8D4fLGw4mW5lIdVoTfyhX4VRJ06dFcU4a+Ho2hvA+YzZJa8XEXRV
6uHozk7THzaGszh8k6V3KC72mqPSFjjM+oapheuJNmEwImqgjfqhSCbQNsllHTf2
+nWOENgcx5BOmXzYn0OWqdX+xFzSFP9RtoSCoHxPTmGQgL1B1qDvZPLo4kHCbzd5
LMRiN+uCpBZRUdTa70sATsCViJOvt+EE2OcLZRAZPtghfeHAsTCBep0qeB1sbdWW
9KABdtpQoiEDxq0Gk7x1PS/k+jyqtjNbm0XhZkzKzdjlTYlFydq5Lo0xo6wbQjcP
GUk2/f6xAIEq1bfGibDXvR0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12284231509284870219342219047069695050
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-06 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kaunas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kauno technikos kolegija'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Skyrius'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'registracija.ktk.lt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 862832141838356978610231423560236102949815668239870845890662637914669381113933230762520205906167172873535388116699712590385743761772186713052262603166576440589106667495273350769973163495744380122862570779888098619578547575990923379102425224817227182848830200224470952075143025334113365853779808637085838527852858285126906293757967736278438050123872238506188490701320222632402624285767836534650685569322223550175599170142250935828394776106198058747036390127140614122210816251265065138837572869552816339640412110267118377218764732097388619789012755971941690485344116612337590018892572454421628030862006474037834111636976953117705984570840491119801868275655641756008099608607800527508826601309918356003689824532194164667121911883664541180560884060597333218516277189090866754099260830278934383446093678771868833601618543272036060104973385167979297024765824435397044269035436824781486141321653753921145053263908774110411558873913719429344552745545997665814649775035140456914141723550952783468789948920824561317000107897067719106583840431572622411474860588988080290475881766585576852031564495466668488823171443896992759007045347316119356936016535476391842174423592752440583587193274457912795407866574152898570023504089307417190829003357469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2b48717fe149a20983fc3ef6a8045d52c6b14c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registracija.ktk.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalas.ktk.lt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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