idpv4.lu.se

- Lunds universitet -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 4b:3d:6a:ea:65:ab:88:3e:2c:71:2c:00:59:71:28:14 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lunds universitet

Organization: Lunds universitet
State / Province: Skåne län
Country: SE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 4b:3d:6a:ea:65:ab:88:3e:2c:71:2c:00:59:71:28:14
Serial Number (int): 100010998298512686063897970656897214484
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f9:7e:16:9f:0c:e2:03:c6:ee:30:de:df:4c:89:59:27:b9:41:f6:99
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 59:6c:d4:f4:6b:f6:0a:41:02:ca:15:70:97:1b:c6:1a:f9:45:cb:69
Fingerprint (sha256): 01:3a:a0:94:0e:0d:c9:29:be:92:4f:1e:7c:0d:91:eb:db:9a:a1:85:66:64:5a:fd:55:30:61:96:fd:fa:c1:3e

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate idpv4.lu.se

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for idpv4.lu.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

idpv4.lu.se
idpv4.srv.lu.se

Other certificates including the domain name lu.se

(limited to 100 certificates)
stf03.nuclear.lu.se
www.lu.se
connect.lu.se
www.lu.se
adm.rwi.lu.se
canmove-app.ekol.lu.se
moodle.nateko.lu.se
grytan.lunarc.lu.se
idpv4.lu.se
af.lu.se
lweb1122.sol.lu.se
www.lu.se
helpdesk.mhm.lu.se
rehab.adm.lu.se
lulock.luopen.lu.se
www.researchmagazine.lu.se
www.gerdahallen.lu.se
edit.info.lu.se
*.lu.se
cloud.nano.lu.se
intern.shop.lu.se
graduateland.com
jamf.esss.lu.se
crcservice.med.lu.se
www.lu.se
webmailtest.lu.se
desktop.lu.se
grub.lucas.lu.se
moodlealfa.omv.lu.se
hta-lundic.ht.lu.se
casa4.bmc.lu.se
ladoklpwlw-lnu.srv.lu.se
forvaltplan.ht.lu.se
*.gis.lu.se
workfolders.nateko.lu.se
imi-rhapsody.crc.med.lu.se
stf02.nuclear.lu.se
uportalhb-test.ldc.lu.se
www.venturelab.lu.se
www.lu.se
llasso393.srv.lu.se
monastica.ht.lu.se
ler486.srv.lu.se
lovisa.lub.lu.se
alarik.lunarc.lu.se
gernet.gerdahallen.lu.se
www.af.lu.se
grandbox.nateko.lu.se
intranet.rwi.lu.se
ipa1.lunarc.lu.se
libanswers.lub.lu.se
duo.maxlab.lu.se
jira.esss.lu.se
extern.shop.lu.se
passport.lu.se
*.gis.lu.se
intranet.rwi.lu.se
workfolders.lu.se
www.lu.se
lu.se
www.oikos.ekol.lu.se
canvas.education.lu.se
brown.crc.med.lu.se
git.ldc.lu.se
print.ehl.lu.se
ladokping-bth.srv.lu.se
jira.esss.lu.se
www.fokusforskning.lu.se
hta-lundic.ht.lu.se
extern.shop.lu.se
w-v-hdf5view-0.maxiv.lu.se
wfm423n2.srv.lu.se
kosmos.lth.se
idpv3.lu.se
gernet.gerdahallen.lu.se
kosmos.lth.se
www.gerdahallen.lu.se
whd.mhm.lu.se
dagfjarilar.lu.se
www.fokusforskning.lu.se
labguru-app.bmc.lu.se
www.jur.lu.se
venturelab.lu.se
connect.lu.se
Intranet.nateko.lu.se
citrix.med.lu.se
graduateland.com
cas.lu.se
ojstest.lub.lu.se
www.gerdahallen.lu.se
casa4.bmc.lu.se
www.gerdahallen.lu.se
exchange.lusem.lu.se
webmail.lu.se
lubas-uplan.lu.se
lms.liveatlund.lu.se
srv-ad-3.maxiv.lu.se
primweb.adm.lu.se
linteg558.srv.lu.se
connect.lu.se

Certificate

The complete raw certificate details for idpv4.lu.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 100010998298512686063897970656897214484
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Skåne län'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lunds universitet'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'idpv4.lu.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 822965626253536184017469027969441106649016181271508828395353050436020096872140872588038014372036238223141982642322351883448365286755675175002733799531073365567304959423829693720346558560043182339565781550811339846408489913237676048460603097818432146531330396297073412464538380848397672705955311871814011483802418989531879141961416906236534295778155166822426109705046239516502189180959780156792208121220763338243917055050314174628187053902414987303669041663586082577161988566347850985840681088936128463068903786333045994166202559216815689261021898095192243660489476511241533076627050216858982482267658947329425240888119085737018030528314737240794123939369438546884827084852050262087777987914002534545426876840636234610519593145222185904611691729529507372738332932878503174023096472813180849206173727421529131495147148011059772779354623844900660733596746201609649457113156561197916883318140700270300583938824640449360665750501878197960170738573822321507353628915509474135176579876912173578470455703058356702852386306346169624421113089542862377753993102572653971706863975509437259714078460330745464837349618360944260342514882267370246798601091448720268365887844234426301269178262252652359689198616999678632188591250490993764719266219163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f97e169f0ce203c6ee30dedf4c895927b941f699
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idpv4.lu.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idpv4.srv.lu.se'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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