tc-net2.insa-lyon.fr

- Institut National des Sciences Appliquées de Lyon -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number b4:6e:77:2c:3b:87:eb:63:ac:eb:81:76:f2:5b:02:54 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Institut National des Sciences Appliquées de Lyon

Organization: Institut National des Sciences Appliquées de Lyon
State / Province: Auvergne-Rhône-Alpes
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): b4:6e:77:2c:3b:87:eb:63:ac:eb:81:76:f2:5b:02:54
Serial Number (int): 239834609006929605498153596084654113364
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a1:54:61:5d:bc:0d:c8:d3:71:59:64:d8:6a:2c:5a:0f:74:95:84:0e
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 62:4a:b2:47:a1:8a:37:4a:de:b2:e4:75:c3:04:40:ea:a2:49:2a:82
Fingerprint (sha256): 02:07:92:b9:25:63:08:d5:40:03:c9:4f:3f:1c:6b:e9:0c:c3:90:fb:23:8d:7b:76:db:05:a9:a9:6a:61:fe:14

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate tc-net2.insa-lyon.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tc-net2.insa-lyon.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tc-net2.insa-lyon.fr
www.tc-net2.insa-lyon.fr

Other certificates including the domain name insa-lyon.fr

(limited to 100 certificates)
insa-dpadsvil1-01.insa-lyon.fr
cocovn.insa-lyon.fr
www.insa-lyon.fr
reportserver.insa-lyon.fr
reve.insa-lyon.fr
mouvinsa.insa-lyon.fr
gofast.insa-lyon.fr
tc-net2.insa-lyon.fr
reve.insa-lyon.fr
orioai.insa-lyon.fr
telecom.insa-lyon.fr
insa-fd.insa-lyon.fr
svn.insa-lyon.fr
tux.creatis.insa-lyon.fr
jpo.insa-lyon.fr
exal.insa-lyon.fr
vk2000-v6.insa-lyon.fr
aip-primeca.insa-lyon.fr
insa-vcvil1-01.insa-lyon.fr
lamcosbao.insa-lyon.fr
ecole-ete.insa-lyon.fr
myriad.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
servif-cocktail.insa-lyon.fr
dsi.insa-lyon.fr
wiki-dsi.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
desk.creatis.insa-lyon.fr
gtwresd.insa-lyon.fr
sgd.insa-lyon.fr
mediacenter.insa-lyon.fr
aip-foad-web.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresc.insa-lyon.fr
vk2-gm-72.insa-lyon.fr
deep.insa-lyon.fr
cipcnet.insa-lyon.fr
fondation.insa-lyon.fr
insa-vxrmgrvil1-01.insa-lyon.fr
fimi2i.insa-lyon.fr
intranetgi.insa-lyon.fr
liris-ktbs01.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
insa-vxrvil1-06.insa-lyon.fr
*.insa-lyon.fr
dsi-ipam.insa-lyon.fr
*.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
helpdesk.insa-lyon.fr
insa-rproxy-01.insa-lyon.fr
fex.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
*.docelec.insa-lyon.fr
tux.creatis.insa-lyon.fr
reportserver.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
catalogue.insa-lyon.fr
biosciences.insa-lyon.fr
tux.creatis.insa-lyon.fr
dsi-esb.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
gfc-services-test.insa-lyon.fr
biosciences.insa-lyon.fr
mandril.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresh.insa-lyon.fr
phishing.insa-lyon.fr
cipcnet.insa-lyon.fr
insa-rproxypp-01.insa-lyon.fr
smtp6.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
lune.insa-lyon.fr
virtualstudyfair.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
aris-connect.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
intranetgi.insa-lyon.fr
desk.creatis.insa-lyon.fr
glpi.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
instrumentation.insa-lyon.fr
dsi-gitlab.insa-lyon.fr
phishing.insa-lyon.fr
lire-pp.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
lire.insa-lyon.fr
redmine-pp.insa-lyon.fr
fex.insa-lyon.fr
insa-ppsympa.insa-lyon.fr
casi.insa-lyon.fr
acdc.creatis.insa-lyon.fr
openreports.insa-lyon.fr
*.docelec.insa-lyon.fr
camus.creatis.insa-lyon.fr
departements.insa-lyon.fr

Certificate

The complete raw certificate details for tc-net2.insa-lyon.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 239834609006929605498153596084654113364
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auvergne-Rhône-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Institut National des Sciences Appliquées de Lyon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tc-net2.insa-lyon.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811601933654260540779526159773598455468841725624624391967978998888148990740662510982837063432319878325683374847602765457368722430460189547564304465950664557117704223448877433922534970654518371181406069345023958573819335228621577286921818336323445199835519867300436728935376504418129317785674324485467744213071752609592772531244947762834407918801617687800672818928367952203851551888824135238528260593454588232429588542597455209160652141325253839964888388165159506573794751966651447405299296948090261117225495557197343415381300612630782442637467186895307946934248827625938860383996997641153006175805828497859450873395602274998967542658238243126040478835503044220177832751636351009757564046311267631102533717790854353878068965051236220797198214639105472749652033830925199620845699159202029255824740714327572204624904314681761763753534829769979476767419849804881478065780806851946938753696449485057883485477353510287179989713418237640085217530916084683231423640838373301454801426593710558151812471677887361935082323401875822818665111504596041260437374137348145941333609135470923374945425253337080816227505956299933171865823732465403546558713502169857264282654697292083267269572790429914763580950083202375830362198254688175333180170682209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a154615dbc0dc8d3715964d86a2c5a0f7495840e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tc-net2.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tc-net2.insa-lyon.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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