vpn.ktk.lt

- Kauno technikos kolegija -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0b:a5:d4:0a:74:ac:4e:d0:16:2f:22:18:37:9b:3f:c9 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kauno technikos kolegija

Organization: Kauno technikos kolegija
Organization unit: IT Skyrius
Locality: Kaunas
Country: LT

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:a5:d4:0a:74:ac:4e:d0:16:2f:22:18:37:9b:3f:c9
Serial Number (int): 15482537634518489020779371544302010313
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 78:02:11:75:1f:3c:c1:97:51:d0:af:1d:29:af:c4:ba:e3:d3:b4:77
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): ae:ab:29:a5:19:32:de:85:5d:69:bf:d1:4c:c0:70:88:9c:70:cb:0f
Fingerprint (sha256): b8:47:0a:82:cc:4c:e9:a3:98:47:1b:b8:28:de:f9:47:49:65:d3:b7:f5:23:0b:19:2b:0b:e9:2f:fe:45:2a:68

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate vpn.ktk.lt

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.ktk.lt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.ktk.lt

Other certificates including the domain name ktk.lt

(limited to 100 certificates)
vma.ktk.lt
senas.ktk.lt
senas.ktk.lt
login.ktk.lt
senas.ktk.lt
senas.ktk.lt
senas.ktk.lt
senas.ktk.lt
kopijavimas.ktk.lt
loginas.ktk.lt
senas.ktk.lt
priemimas.ktk.lt
senas.ktk.lt
priemimas.ktk.lt
priemimas.ktk.lt
senas.ktk.lt
vma.ktk.lt
vb.ktk.lt
ptest.ktk.lt
senas.ktk.lt
senas.ktk.lt
loginas.ktk.lt
www.ktk.lt
registracija.ktk.lt
priemimas.ktk.lt
senas.ktk.lt
vb.ktk.lt
senas.ktk.lt
login.ktk.lt
senas.ktk.lt
senas.ktk.lt
login.ktk.lt
moodle.ktk.lt
login.ktk.lt
registracija.ktk.lt
moodle.ktk.lt
senas.ktk.lt
login.ktk.lt
senas.ktk.lt
moodle.ktk.lt
moodle.ktk.lt
registracija.ktk.lt
darbastaliai.ktk.lt
senas.ktk.lt
vpn.ktk.lt
vma.ktk.lt
senas.ktk.lt
registracija.ktk.lt
priemimas.ktk.lt
senas.ktk.lt
senas.ktk.lt
senas.ktk.lt
sw.ktk.lt
gedimai.ktk.lt
pastas.ktk.lt
senas.ktk.lt
vpn.ktk.lt
senas.ktk.lt
vpn.ktk.lt
senas.ktk.lt
vpn.ktk.lt

Certificate

The complete raw certificate details for vpn.ktk.lt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15482537634518489020779371544302010313
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kaunas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kauno technikos kolegija'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Skyrius'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.ktk.lt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 749410308263647554051353631765298610216424510419989612647226473261631125958035283905088502227974775370536401033540228085465285052888141551876800223912235404285059776600713332183699672523197132699215066499129170103171976084251091755487770423626763194007416734582460940710819966642326114303354341083063588281846008811512396799799679164856319896497862894802050066498193104565479959338083824405410848528246481404219343964135124803380860098878315289526878568073360747569323076235653830441653271058341636602362323791128672165245562230809005270627988556964509562447520320368863150772437903456646824863081491832983613500837965504467809908130904168419563075693635878453330832055165990402184523074885003842394103183053129353071772085502705632987829635379351104151459700980238061623233793519011494115444149214884692601588692501663255652882054133971137652745403142895267120437595749688487444652924195805422553296229878239984213644232132958801847550805103561529126140293639872474607204704101785754992099300035707992650648127674277643397159979500127434720205037806902630761537961989388523452321836935113428651007988492220006998004517916105757166052026162004204368377799780036632661733086388159901055132683314057823731578983272477472480756237055379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							780211751f3cc19751d0af1d29afc4bae3d3b477
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.ktk.lt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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