fys.kuleuven.be

- Katholieke Universiteit te Leuven -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 4e:9d:4c:e5:fb:86:35:61:fd:14:6a:1c:82:ed:e3:16 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Katholieke Universiteit te Leuven

Organization: Katholieke Universiteit te Leuven
State / Province: Vlaams-Brabant
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 4e:9d:4c:e5:fb:86:35:61:fd:14:6a:1c:82:ed:e3:16
Serial Number (int): 104496533962235484935641824800388539158
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f3:51:2b:77:8a:4e:07:f3:5f:ab:5c:3c:75:cd:58:03:d4:b2:60:f6
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 61:05:d8:30:c5:98:3f:3f:80:4d:89:18:4d:ad:ec:e9:c3:c5:a2:b6
Fingerprint (sha256): 01:bb:0a:64:92:ae:6a:23:74:2a:22:59:50:5a:b6:9a:f7:d1:cb:6f:05:ce:38:c3:a0:74:35:30:c5:d0:d4:93

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate fys.kuleuven.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fys.kuleuven.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fys.kuleuven.be
www.fys.kuleuven.be

Other certificates including the domain name kuleuven.be

(limited to 100 certificates)
alum.kuleuven.be
support.themallschool.org.uk
print.t.icts.kuleuven.be
fac.ppw.kuleuven.be
icts-s-dc2.luna.kuleuven.be
mysql.cs.kotnet.kuleuven.be
bbup1.q.icts.kuleuven.be
account.kuleuven.be
faber.kuleuven.be
workflow.groupware.oad.icts.kuleuven.be
icts-s-exmbx8.luna.kuleuven.be
cwisdb.kuleuven.be
iks32.fys.kuleuven.be
icts-s-desigo3.LUNAH.KULEUVEN.BE
dylius.icts.kuleuven.be
lstat.kuleuven.be
ICTS-S-RDADYL1.lunah.kuleuven.be
vsm-rdg.fysad.fys.kuleuven.be
zebra.cs.kuleuven.be
testjo.t.icts.kuleuven.be
ICTS-S-RDSIVAT1.tad.kuleuven.be
testjo.t.icts.kuleuven.be
voxtron.icts.kuleuven.be
synth.cs.kuleuven.be
*.apps.sp2019.groupware.oad.icts.kuleuven.be
www-sso.groupware.t.icts.kuleuven.be
blackboard-saas.t.icts.kuleuven.be
*.apps-sp2016.groupware.oad.icts.kuleuven.be
kulapp.t.icts.kuleuven.be
groupware.tad.icts.kuleuven.be
fys.kuleuven.be
squaredup.q.icts.kuleuven.be
icts-s-scomgw2.lunah.kuleuven.be
extranet.kuleuven.be
dagkrant.kuleuven.be
fys.kuleuven.be
icts-s-exmbx23.luna.kuleuven.be
ccis-iam-voucherservice.q.icts.kuleuven.be
*.sp2007.groupware.oad.icts.kuleuven.be
spub.icts.kuleuven.be
scanner.ghum.kuleuven.be
butler.cs.kuleuven.be
gbw-s-llk01.luna.kuleuven.be
tickatlab.q.gbiomed.kuleuven.be
TD-GBS-metasys.icts.kuleuven.be
*.apps.ncbgroupware.oad.icts.kuleuven.be
icts-s-dc2.tad.kuleuven.be
prep.cc.kuleuven.be
sg1.icts.kuleuven.be
apitest.feb.kuleuven.be
*.kuleuven.be
mtm.kuleuven.be
*.groupware.t.icts.kuleuven.be
iiw.kuleuven.be
lioo-hardware.icts.kuleuven.be
testjo.t.icts.kuleuven.be
tfs.q.icts.kuleuven.be
sp.biw.kuleuven.be
graduateland.com
webi11.aps.kuleuven.be
gbw-s-vibdock01.luna.kuleuven.be
nexus.icts.kuleuven.be
ICTS-S-RDA1.tad.kuleuven.be
fs.q.icts.kuleuven.be
wayf.q.icts.kuleuven.be
my.kuleuven.be
qmp4e4.cc.kuleuven.be
nieuws.kuleuven.be
co-de.experiments.cs.kuleuven.be
hiva.esat.kuleuven.be
pool01.icts.kuleuven.be
www.cosic.esat.kuleuven.be
icts-p-idm-12.lnx.icts.kuleuven.be
toledo.q.icts.kuleuven.be
legacy-owa.groupware.kuleuven.be
find.kuleuven.be
listserv.icts.kuleuven.be
ICTS-S-RDSLIO1.tad.kuleuven.be
lidkaart.alum.kuleuven.be
*.apps-sp2016.groupware.z.icts.kuleuven.be
GHUM-S-VSH00.LUNA.KULEUVEN.BE
search.t.icts.kuleuven.be
nextvib.gbiomed.kuleuven.be
icts-d-ua-3.lnx.icts.kuleuven.be
rdweb.icts.kuleuven.be
pad.esat.kuleuven.be
icts-d-idm-3.lnx.icts.kuleuven.be
onderwijsaanbod.kuleuven.be
find.t.icts.kuleuven.be
webp12.aps.kuleuven.be
find.q.icts.kuleuven.be
wmsopleiding.cc.kuleuven.be
*.am.thomasmore.ezproxy.kuleuven.be
icts-s-crdwts1.tad.kuleuven.be
ida2014.org
icts-s-dc1.qad.kuleuven.be
drives.kuleuven.be
lyncaccess.kuleuven.be
icts-s-sfbt01.icts.kuleuven.be
stage.soc.kuleuven.be

Certificate

The complete raw certificate details for fys.kuleuven.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WCuW9S9YJxsuo1gUxkO
OnHS1OSx6hz0r9K6FyhUabnSubRfUyd4/aQtFHNof5FjG5RS6ezkUpdkdwWZC41p
y6dymDC0l/Ks/Wj/nHj9CGKH7MUiN0gXmsWZ6PSKzsFXyJIreHRcmEjMpmVye8xy
AdKrVygMhIdzpMaoN1ooCHs7l9xc4FE4ov9hG98L5q2YX7JRIp90+YwuX7NqKZVf
IBQTmsPiEZ7Fx/HWc12WBEd5txR50rJ40RBFCVf2V+F5/CmH6g9wTM/KIFvuPVMs
iFj5/6RErhPlvPGJQ7afvU+dqIueOD3WpdvCaDmNP/t3lkQNMB/mups7QMYOXNkn
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 104496533962235484935641824800388539158
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vlaams-Brabant'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Katholieke Universiteit te Leuven'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fys.kuleuven.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27946340619231606673582773009831237028619698680603675745313883993530724599989285365358173632268794106347699244396439934090451507781204850349844094491516117512405010870765618508483041168448834132895920505415869035398233735591337533032512862253944699389460716924248531902027527986234976139949516152588699288329435019576791222428357101137760775271553846486764108882062393578717752426514324182793578270863008263653874708695966526265130003081643209570459965148729102365500780206920263560832789673677875192947660701072360534597097200416396738190060699186165112845646881320654171374747283764154265955567063758766522546857741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3512b778a4e07f35fab5c3c75cd5803d4b260f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fys.kuleuven.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fys.kuleuven.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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