iahc.upc.edu

- Universitat Politècnica de Catalunya -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number de:c6:19:35:9c:dd:59:31:33:2f:c4:25:e2:7d:c5:2d was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Universitat Politècnica de Catalunya

Organization: Universitat Politècnica de Catalunya
State / Province: Barcelona
Country: ES

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): de:c6:19:35:9c:dd:59:31:33:2f:c4:25:e2:7d:c5:2d
Serial Number (int): 296117201150121179539325177860234003757
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d1:b9:8a:7f:e9:05:c9:77:35:72:d0:9e:7d:f6:db:d4:18:49:1a:55
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 25:0e:8f:36:b6:2d:b5:f9:bb:9f:03:38:4d:fd:d3:07:f3:6c:cd:b1
Fingerprint (sha256): 02:ba:e4:55:2b:5d:b0:a2:40:97:6a:1a:30:59:50:0c:59:bf:3d:5b:c1:1f:51:a7:7f:d5:0b:87:87:d2:14:0f

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate iahc.upc.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iahc.upc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

iahc.upc.edu
www.iahc.upc.edu

Other certificates including the domain name upc.edu

(limited to 100 certificates)
registros.mcia.upc.edu
catedraseat.upc.edu
camutgacb2.camins.upc.edu
at-cbl.webs.upc.edu
blog.catedratelefonica.upc.edu
personals.ac.upc.edu
esecretaria.upc.edu
bonzo5.upc.edu
dicoptica.slt.webs.upc.edu
sosetseib.upc.edu
puigponc.upc.edu
*.gso.ac.upc.edu
aiche.upc.edu
nexus24.webs.upc.edu
bonzo5.upc.edu
ks.site.ac.upc.edu
storeserv2.upc.edu
wwweride.webs.upc.edu
mdut.duot.upc.edu
testletsencrypt1.upc.edu
puppet.terrassa.upc.edu
genweb6-exc.upc.edu
bonzo.upc.edu
wwwccooupc.webs.upc.edu
grlum.dpe.upc.edu
vader.upc.es
bonzo.upc.edu
profesoresim2019.upc.edu
mail.knowledgedefinednetworking.org
necada.com
promocio.epsem.upc.edu
www.ict-tropic.upc.edu
connect.barcelonatech-upc.eu
poseidon-project.upc.edu
genweb6-exc1.upc.edu
systol16.cs2ac.upc.edu
storeserv2.upc.edu
macda.upc.edu
www.connect-rise.eu
numfactory.upc.edu
wwwportaleuetib.webs.upc.edu
certificacio.fpc.upc.edu
bonzo.upc.edu
wwwajudamow.webs.upc.edu
agudes.upc.edu
testletsencrypt1.upc.edu
gitsgcreb.cs.upc.edu
ravadacbl-ext.upc.edu
wikicodalab.webs.upc.edu
bonzo.upc.edu
ceacat.upc.edu
icton2017.udg.edu
bonzo4.upc.edu
leia4.upc.edu
intra3c.webs.upc.edu
bonzo2.upc.edu
jtn2019.upc.edu
ggcc.webs.upc.edu
bohr.upc.es
elena2.webs.upc.edu
wwwintranetsga.webs.upc.edu
iahc.upc.edu
lamp.upc.edu
bonzo4.upc.edu
imap.upc.edu
gemma.upc.edu
upcommons.upc.edu
www.ict-tropic.upc.edu
webconf-test.upc.edu
bonzo5.upc.edu
blog.cit.upc.edu
gentil.upc.edu
svn.fib.upc.edu
penny.upc.edu
orcc.upc.edu
eusum.webs.upc.edu
bus-soades2.upc.edu
wwwintranetsga.webs.upc.edu
bonzo5.upc.edu
eiec2007.upc.edu
www.upc.edu
wwwpremidavydluque.webs.upc.edu
rempark.cetpd.upc.edu
wwwgrlum.webs.upc.edu
bonzo2.upc.edu
clubesportiucamins.upc.edu
ugt.upc.edu
fablabeebe.upc.edu
aie.upc.edu
bonzo5.upc.edu
testletsencrypt1.upc.edu
bonzo5.upc.edu
ieee.upc.edu
genderbiasnlp.talp.cat
radi.upc.edu
i-dress-project.iri.upc.edu
lub.upc.edu
aiche.webs.upc.edu
recerca.ctt.upc.edu
app.utgcdb.upc.edu

Certificate

The complete raw certificate details for iahc.upc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa7NubNEiavb5rbJBswH
B/UkKMNQ9igf4QqlFJ7i17Gby/4xhXvoutpUktsmp4lf3HK4jGk94m0rhVecjw1d
tKdxtFooDl5D+Lr7yCmAtimRSOJsQJ57YpPo6Ymo6EKsLYIvFnyWTZexThrSt7mc
8nfomIvbpHE6+NO/j940LAdr8vUVemPkCrUTEDGT5K3ut+ZjumgUlLKaH9o7WaRa
nGwypux0zq8vmEjbsDwp5R10ypHPRS6oPFdPoTg9wkdCdOjX6Tnr2+ASsLkR/ZW/
khigyWfTzzzB47xCO53PnnyHESfVaONc9fXpLrUTII0ivVShdwdRd5ECxhTlKP/f
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296117201150121179539325177860234003757
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barcelona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universitat Politècnica de Catalunya'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iahc.upc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24955144953453007079218976384058360588334946743578447855291701369328391683901270409001002680575073306959980332263739233161679368664481169990813279715722616453462909741023371716390616716872067953344508535211416461017782062744519921199322876907256355607552135783960843661124038180386365777950841268878830647157307926669726987194117028792516069169743823844305878518604146771532755666307368585696940770650434274274519887927555531176656170876429681553020430570141476568044357259081546262187689585344913840378368562931499377320811373340916948060291891850940303381312188895863184944264828267786113531176024484972410783653803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1b98a7fe905c9773572d09e7df6dbd418491a55
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iahc.upc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iahc.upc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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