www.insa-lyon.fr

- Institut National des Sciences Appliquées de Lyon -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number ae:64:1e:08:6d:c5:33:70:bb:1a:c2:7b:18:21:0c:71 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Institut National des Sciences Appliquées de Lyon

Organization: Institut National des Sciences Appliquées de Lyon
State / Province: Auvergne-Rhône-Alpes
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): ae:64:1e:08:6d:c5:33:70:bb:1a:c2:7b:18:21:0c:71
Serial Number (int): 231805510092514521689541856601814666353
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ce:8c:a7:9f:9c:6a:21:f2:37:af:5c:da:7c:da:b5:31:d9:ba:cb:dd
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 54:66:b4:3d:ff:8b:79:95:29:1f:2a:b4:01:f0:a4:e1:31:9f:18:e3
Fingerprint (sha256): 01:21:85:7b:40:f8:12:ee:ac:1c:56:6c:36:38:ba:ac:4c:07:86:e3:18:68:a1:cc:ca:cb:cc:f5:19:45:99:75

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.insa-lyon.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.insa-lyon.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.insa-lyon.fr
insa-lyon.fr

Other certificates including the domain name insa-lyon.fr

(limited to 100 certificates)
insa-dpadsvil1-01.insa-lyon.fr
cocovn.insa-lyon.fr
www.insa-lyon.fr
reportserver.insa-lyon.fr
reve.insa-lyon.fr
mouvinsa.insa-lyon.fr
gofast.insa-lyon.fr
tc-net2.insa-lyon.fr
reve.insa-lyon.fr
orioai.insa-lyon.fr
telecom.insa-lyon.fr
insa-fd.insa-lyon.fr
svn.insa-lyon.fr
tux.creatis.insa-lyon.fr
jpo.insa-lyon.fr
exal.insa-lyon.fr
vk2000-v6.insa-lyon.fr
aip-primeca.insa-lyon.fr
insa-vcvil1-01.insa-lyon.fr
lamcosbao.insa-lyon.fr
ecole-ete.insa-lyon.fr
myriad.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
servif-cocktail.insa-lyon.fr
dsi.insa-lyon.fr
wiki-dsi.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
desk.creatis.insa-lyon.fr
gtwresd.insa-lyon.fr
sgd.insa-lyon.fr
mediacenter.insa-lyon.fr
aip-foad-web.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresc.insa-lyon.fr
vk2-gm-72.insa-lyon.fr
deep.insa-lyon.fr
cipcnet.insa-lyon.fr
fondation.insa-lyon.fr
insa-vxrmgrvil1-01.insa-lyon.fr
fimi2i.insa-lyon.fr
intranetgi.insa-lyon.fr
liris-ktbs01.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
insa-vxrvil1-06.insa-lyon.fr
*.insa-lyon.fr
dsi-ipam.insa-lyon.fr
*.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
helpdesk.insa-lyon.fr
insa-rproxy-01.insa-lyon.fr
fex.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
*.docelec.insa-lyon.fr
tux.creatis.insa-lyon.fr
reportserver.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
catalogue.insa-lyon.fr
biosciences.insa-lyon.fr
tux.creatis.insa-lyon.fr
dsi-esb.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
gfc-services-test.insa-lyon.fr
biosciences.insa-lyon.fr
mandril.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresh.insa-lyon.fr
phishing.insa-lyon.fr
cipcnet.insa-lyon.fr
insa-rproxypp-01.insa-lyon.fr
smtp6.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
lune.insa-lyon.fr
virtualstudyfair.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
aris-connect.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
intranetgi.insa-lyon.fr
desk.creatis.insa-lyon.fr
glpi.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
instrumentation.insa-lyon.fr
dsi-gitlab.insa-lyon.fr
phishing.insa-lyon.fr
lire-pp.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
lire.insa-lyon.fr
redmine-pp.insa-lyon.fr
fex.insa-lyon.fr
insa-ppsympa.insa-lyon.fr
casi.insa-lyon.fr
acdc.creatis.insa-lyon.fr
openreports.insa-lyon.fr
*.docelec.insa-lyon.fr
camus.creatis.insa-lyon.fr
departements.insa-lyon.fr

Certificate

The complete raw certificate details for www.insa-lyon.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 231805510092514521689541856601814666353
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auvergne-Rhône-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Institut National des Sciences Appliquées de Lyon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.insa-lyon.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815125202729108663626490033360170329334035097690937610888809726095718769050163379246814446100020184200802700484966901946866208370702431681992076636707722370201883516651731165900618244257941144878175501967244112564388934209494393801284476271830843119660831336886088802913423742911507247600779512612448921531595202206862790901739099547599895141743502406732456005699988171746130661196162331455009928120182514187637522636248703875344800876083282170778577298639502741572581442410477972837905139387724623158965975187977214330313856871609209307403748521680350814642952754273150329400733924079515302272709239562601881390497188189070125382863707437961090238246829462633819966452401485751170976048990135467458887888553945824439957947254059374345106988474425915663786082246330516540258190916626314440986460990536287529037405520802325118103403915693320972615630967005246510555546631056420634692529519184025822449362424899441860689381902550431134456612415530154384976336323699894965755792315155631667792601788826072268173673443981839491024037248203519064170994278295017712749352396470518904418526659716689334243917885276345692114182072183335909536013066516874753829561000402003529178730058936836018389657364354867641056740935731325423024527142489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce8ca79f9c6a21f237af5cda7cdab531d9bacbdd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insa-lyon.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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