ernsi2019.tue.nl

- Technische Universiteit Eindhoven -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 01:e7:f0:b1:ee:c6:55:8c:a0:d5:a1:97:8b:19:ee:ae was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Technische Universiteit Eindhoven

Organization: Technische Universiteit Eindhoven
Locality: Eindhoven
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 01:e7:f0:b1:ee:c6:55:8c:a0:d5:a1:97:8b:19:ee:ae
Serial Number (int): 2533530445693306125832237170541850286
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: f3:77:62:16:e1:01:fe:7f:0e:af:85:eb:7b:20:8c:7c:b9:99:f2:31
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 3e:d8:9f:f9:99:75:04:39:e7:26:31:33:6c:da:6e:c6:9e:bb:f5:00
Fingerprint (sha256): 00:9a:ff:f5:c2:86:ff:d2:af:73:37:fe:12:30:37:d0:73:bc:ba:29:e8:7c:79:73:72:95:e2:77:9a:22:0a:6a

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate ernsi2019.tue.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ernsi2019.tue.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ernsi2019.tue.nl
www.ernsi2019.tue.nl

Other certificates including the domain name tue.nl

(limited to 100 certificates)
peach.win.tue.nl
cirrus.tue.nl
venus.tue.nl
ernsi2019.tue.nl
anankep.tue.nl
forms.carolinehummels.tue.nl
webmath.tue.nl
sites.win.tue.nl
plasimo.phys.tue.nl
cswennenhuis.win.tue.nl
sitb2020.win.tue.nl
jobs.tue.nl
alumni.simonstevin.tue.nl
compprog.win.tue.nl
groep-een.tue.nl
peach.win.tue.nl
vargas.icts.tue.nl
owas.test.tue.nl
owinfo.tue.nl
bep.win.tue.nl
articles.il.tue.nl
studyweb2.tue.nl
oocsi.id.tue.nl
trainingenonlinemedia.tue.nl
dialoog.tue.nl
kvaesen.ieis.tue.nl
nadine.icts.tue.nl
skills-assessment.tue.nl
peach.win.tue.nl
alumnionlineforms.tue.nl
delta-dev.win.tue.nl
webhost.gewis.nl
sites.im.tue.nl
peach.win.tue.nl
opennebula.tue.nl
calculuslecture.tue.nl
vandeburgt.tue.nl
pas.tue.nl
evo02.win.tue.nl
svn.win.tue.nl
rdmwiki.tue.nl
hrlink.tue.nl
seclab1.win.tue.nl
powertech2015-eindhoven.tue.nl
bep.win.tue.nl
forms.dies2015.tue.nl
alumnionlineforms.tue.nl
sites2010.iec.tue.nl
oslo.tue.nl
connecttest.tue.nl
carlos.win.tue.nl
groep-een.tue.nl
formulieren.cursor.tue.nl
platoolab.id.tue.nl
*.dianus.libr.tue.nl
dashboard.tue.nl
vpn2.tue.nl
peach.win.tue.nl
p-e.ieis.tue.nl
bnp9.win.tue.nl
sites.im.tue.nl
openepda.org
is.ieis.tue.nl
step-t.icts.tue.nl
autonomic-networks.ele.tue.nl
lyncmedpool01.campus.test.tue.nl
crowdfund.tue.nl
security1.win.tue.nl
forms.tuexperience.tue.nl
assignments.win.tue.nl
opac.ieis.tue.nl
accept-horafinita.tue.nl
sites.bwk.tue.nl
groep-een.com
technificent.nl
acapulco.tue.nl
industria.tue.nl
vandewouw.dc.tue.nl
incapsula.com
kerstwintercircus.tue.nl
innovationspace.tue.nl
landingont.step.tue.nl
tuwep.tue.nl
industria.tue.nl
peach.win.tue.nl
alumnionline.tue.nl
gale.win.tue.nl
pathways.tue.nl
ocmstest.tue.nl
faraday.ele.tue.nl
momentum.tue.nl
incapsula.com
w3.tue.nl
peach.win.tue.nl
vandewouw.dc.tue.nl
security.tue.nl
ooti-projects.win.tue.nl
autonomic-networks.ele.tue.nl
security.tue.nl
peach.win.tue.nl

Certificate

The complete raw certificate details for ernsi2019.tue.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2533530445693306125832237170541850286
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Eindhoven'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technische Universiteit Eindhoven'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ernsi2019.tue.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837822480523993608831958514027106623416313351334100380816882789825811026029356422216705790697060913557562192067163314434539451198721370928728562781605302848749632589615405251470952155095108483669995789448707503420442519682488667095911208415021424662982803047544044297251531365977148081101145678906201614465869712963841479312889073996540221266856702613070616012014642903185993635592438712762631073026086681723282680466725168118741776658047310853080893993727820339040748870397954215327540278850050543158252787075194192009843070310065603415148610141414398660548054697973069756715529819831550419132896461099180931557996227450335979913745718619064768928589882803972683752174887709408983760251491868695884014458117484713705940149746947906033621547931805896915622955283857131967904737944057726351564973913453121936255915399254051122639813627483445831442546468113344168073076765918339251767064743007091159332093171175627255851210297709422342008306818113634789118085448841619908069857087559036924837147104673409302515123700414594516131427338113336758531960901179653743434900469004346891303861008378372714335716538433668741868835901887133450149294914177221500502337361252754457420345079497751969469832083513631775799545873232653431975999108469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3776216e101fe7f0eaf85eb7b208c7cb999f231
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ernsi2019.tue.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ernsi2019.tue.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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