cbs.easo.europa.eu

- European Asylum Support Office -

Issued by QuoVadis Europe SSL CA G2

About this certificate

This digital certificate with serial number 47:72:ad:dc:a4:26:63:aa:5a:c7:a7:49:e7:75:b4:73:6a:6b:65:a4 was issued on by QuoVadis Trustlink B.V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

European Asylum Support Office

Organization: European Asylum Support Office
State / Province: Valletta
Locality: Valletta
Country: MT

QuoVadis Trustlink B.V.

Organization: QuoVadis Trustlink B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 47:72:ad:dc:a4:26:63:aa:5a:c7:a7:49:e7:75:b4:73:6a:6b:65:a4
Serial Number (int): 407895775186904734432604047750701742716153980324
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: dd:46:2e:69:2e:85:cb:10:69:1a:57:08:9e:bd:59:bb:20:bc:b1:22
AuthorityKeyId: 2f:ad:64:aa:cf:29:0d:30:da:cb:44:3e:3f:d6:4f:ba:1a:9f:f1:78

Fingerprint (sha1): e9:6d:02:89:07:92:e2:fc:48:15:cb:7b:f0:89:c5:05:8e:aa:e0:0c
Fingerprint (sha256): 01:29:6e:b3:96:e5:8d:c2:c5:e2:c2:09:3c:de:45:64:b6:36:eb:9b:a2:06:7c:76:84:ca:26:ce:76:64:6d:e2

Issuing Certificate URL: http://trust.quovadisglobal.com/quovadiseuropesslcag2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/quovadiseuropesslcag2.crl

Check the revocation status for certificate cbs.easo.europa.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cbs.easo.europa.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cbs.easo.europa.eu
cbs.euaa.europa.eu

Other certificates including the domain name europa.eu

(limited to 100 certificates)
cpvoextranet.cpvo.europa.eu
www.cmfb.europa.eu
esubweb-xcomp.ema.europa.eu
*.frontex.europa.eu
nuclear.jrc.ec.europa.eu
acc.nsl.consilium.europa.eu
prd.frontex.europa.eu
www.easa.europa.eu
vaccination-info.eu
www-s.eige.europa.eu
cyclone.enisa.europa.eu
www-s.eige.europa.eu
ews.eeas.europa.eu
connect19.ca
portal.europol.europa.eu
staging.cedefop.europa.eu
5691420614590464-fe3.pantheonsite.io
clearinghouse-oef.jrc.ec.europa.eu
a-sdw-wsrest.ecb.europa.eu
dns-vetting1j.map.fastly.net
rvd.ema.europa.eu
a-procurement.ecb.europa.eu
fmapps.ema.europa.eu
monthlyanalysis.frontex.europa.eu
euctis-preprod.ema.europa.eu
bauth1.europarl.europa.eu
euctis-uat2.ema.europa.eu
mail.frontex.europa.eu
cbs.easo.europa.eu
nirvana.f4e.europa.eu
erc.europa.eu
sealingservice.grants.ec.europa.eu
a-talent.ecb.europa.eu
*.in.ep.europa.eu
r2.shared.global.fastly.net
odin.jrc.ec.europa.eu
idm.f4e.europa.eu
circulareconomy.europa.eu
opmd.publications.europa.eu
dev.edpsweb.edps.europa.eu
eulisa.europa.eu
eudravigilance-human-training.ema.europa.eu
sip.cepol.europa.eu
cyclone.enisa.europa.eu
test-eguides.osha.europa.eu
*.eeas.europa.eu
knowledge-base.inspire.ec.europa.eu
team-europe-partners.network.europa.eu
fch.cust.concepto.ch
*.euipo.europa.eu
cti-chat.enisa.europa.eu
webmail.eca.europa.eu
mobiledw.tech.ec.europa.eu
setis.ec.europa.eu
alumni.europa.eu
stsext.ema.europa.eu
*.stress.ec.europa.eu
biodiversity.europa.eu
us-server2.cedefop.europa.eu
mobile.tech.ec.europa.eu
r2.shared.global.fastly.net
edps.europa.eu
e3p.jrc.ec.europa.eu
eudragmdp.ema.europa.eu
bi.ema.europa.eu
nexus.cis.consilium.europa.eu
cbrne.jrc.ec.europa.eu
owa.ema.europa.eu
aula.frontex.europa.eu
*.fra.europa.eu
*.discomap.eea.europa.eu
a-cms2-ro.ecb.europa.eu
organised-crime-corruption-track-record.ec.europa.eu
sip.era.europa.eu
r2.shared.global.fastly.net
webanalytics.acc.fpfis.tech.ec.europa.eu
ssl861147.cloudflaressl.com
dns-vetting1j.map.fastly.net
webstats.eit.europa.eu
cewe1.eurojust.europa.eu
e3p.jrc.ec.europa.eu
a-www.ecb.europa.eu
5691420614590464-fe3.pantheonsite.io
enet.cepol.europa.eu
*.cedefop.europa.eu
SafeOnWeb.eurofound.europa.eu
www.eit.europa.eu
jt.ec.europa.eu
list.aasc.europa.eu
pgateway.ema.europa.eu
eit.europa.eu
restricted.eurojust.europa.eu
*.cooperation.enisa.europa.eu
esvac-test.ema.europa.eu
esm.europa.eu
epwa.europarl.europa.eu
*.frontex.europa.eu
isportal.berec.europa.eu
sip.eib.org
economic-policy-committee.europa.eu

Certificate

The complete raw certificate details for cbs.easo.europa.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407895775186904734432604047750701742716153980324
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Europe SSL CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-13 13:44:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-13 13:54:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Valletta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Valletta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'European Asylum Support Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cbs.easo.europa.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 821489661415669770166017170360016258412201835091203644484313119730358693691886322489466944498636442077651516325031035991665273814530657555304895645747108226920662252833579915445289396158198593180866395781464853257005140304623855306136754560690748426070116663063753780947403764596902039920408439410616599038735185850780580239727227313207975773353081577755991568593077257195068050945243541099436659284794569509399702889178202250621114736111550893053387371195561848796522919007242011013764645308407155492669670338142040601082587869314840253964592537077723213297776403785374510033383997802323162025991876888101136756428669213529423881378095825395951069105869864873926257148605781476588269097633762108608730876064015539242506476625700224538011158864675931327514573859001202605100728091316897153549106902620522051034786977531318277023457645443524277221154850788889713927014351644510249877860420732137110006018401221744297532251970595645055913947535262239797181617737252843310742977883408769337483953461292674105224266292741443507107328623379668640154480950738257731066497264453720760978411545605298801343565532952039887300622728833619938411600443710024953302403561211617016750954133686161181500490098829734129724782263369408208513517900517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2fad64aacf290d30dacb443e3fd64fba1a9ff178
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/quovadiseuropesslcag2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs.easo.europa.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs.euaa.europa.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/quovadiseuropesslcag2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd462e692e85cb10691a57089ebd59bb20bcb122
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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