idal.uv.es

- Universitat de València -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 03:55:ea:1a:3f:61:29:bd:79:6f:82:0a:2d:4e:1b:4f was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universitat de València

Organization: Universitat de València
Organization unit: departamento de Ing. Electrónica
Locality: Valencia
Country: ES

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 03:55:ea:1a:3f:61:29:bd:79:6f:82:0a:2d:4e:1b:4f
Serial Number (int): 4433777383724706364346635985160641359
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 07:d2:84:b5:d7:79:84:ae:9a:4b:fa:54:b0:b8:76:36:36:78:3e:50
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 6e:aa:20:21:30:e3:0a:72:26:b7:5c:2e:c8:4a:0a:bf:d1:57:77:74
Fingerprint (sha256): 03:2f:5c:0d:b6:6d:33:dd:d1:c7:a0:f8:41:cd:e3:6c:a2:b4:d7:f0:b5:7e:3d:1c:7c:37:ed:df:77:40:51:6c

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate idal.uv.es

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for idal.uv.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

idal.uv.es

Other certificates including the domain name uv.es

(limited to 100 certificates)
bdusu.uv.es
lhcpheno.ific.uv.es
ieee.uv.es
evalu137.ific.uv.es
uvapp.uv.es
mupart.uv.es
tapnas.uv.es
lcg2mon.ific.uv.es
www.uv.es
irt.ific.uv.es
epo.uv.es
mooc.uv.es
glass.uv.es
storage3demo.ific.uv.es
symposium.events
raspito1.uv.es
idal.uv.es
webservsec.uv.es
aulaarchivo.uv.es
correo.uv.es
tapec.uv.es
angelat.uv.es
moodle.uv.es
jirat.uv.es
webges.uv.es
admundsen.ci.uv.es
dmk.uv.es
dockprod.uv.es
imp.ific.uv.es
enquest4.uv.es
tapnas.uv.es
webgrec.uv.es
imageclef.uv.es
hodor.uv.es
hyperion.uv.es
references.ific.uv.es
entresiglos11.uv.es
cectmox5.uv.es
matronasmadrid.symposium.events
trobes.uv.es
symposium.events
sestud.uv.es
www.uv.es
research.uv.es
esamsv03.uv.es
piwik.uv.es
naslifalta.i2sysbio.uv.es
symposium.events
roderic.uv.es
radioastronomia.uv.es
uvmecenatge.uv.es
tapnas.uv.es
research.uv.es
ai4oceans.uv.es
preincoming.uv.es
tapec.uv.es
enquest4.uv.es
caucedo.uv.es
dmk.uv.es
alufis35.uv.es
research.uv.es
astrokit.uv.es
bdusu.uv.es
webges.uv.es
webstr.audio.uv.es
rififi.uv.es
jira.uv.es
clepsidra.uv.es
encuestas.uv.es
leito.uv.es
symposium.events
naslifalta.i2sysbio.uv.es
webgrec.uv.es
references.ific.uv.es
evauwm.uv.es
etsetv.uv.es
leito.uv.es
admundsen.ci.uv.es
symposium.events
sonarqube.uv.es
radioastronomia.uv.es
nextdesk1.ific.uv.es
cectsyn.uv.es
citas.uv.es
tiqueting.uv.es
sonarqube.uv.es
software.uv.es
sefuv.uv.es
llistes.uv.es
espejo.uv.es
apixat.uv.es
sestud0.uv.es
webific.ific.uv.es
inmaculados.uv.es
artelope.uv.es
corral0.uv.es
silknow.uv.es
susblaib1.tel.uv.es
webges.uv.es
tapec.uv.es

Certificate

The complete raw certificate details for idal.uv.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpqaLaPlIBr7gHQcdb4S
X3gx25k/cSn/MKd8hQr9X6ZRUIXqCekUjUPN2O5WQCSpO7LB6ujluBu34QTAqao1
uq1ruLVmN2w3+bL8SjtBmbS3E/1KgM8MDQ/u+od558joDYE3pIxHY42QXJ4D0TRa
X/UU5hiTnnOe9g2eACiYa4lWOdGz8Vrn1Yga77Gs/zKE3qf04UfRZF+IUOU+LP4x
Z4iv7X55o0FUgS2lnDFkUge/iDHoV2fgFcxkFBV96JAJ1nh+q9gWLuDWt7qjIyAV
eduH27niPxRBK5IWkgQvzquuLP5G+N63MowDNQ+e61zLxaASvkHXA6j8FAQBTclA
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4433777383724706364346635985160641359
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-05 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Valencia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universitat de València'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'departamento de Ing. Electrónica'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'idal.uv.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25071421598550228844642419421296519321593156951065914592029366539899419400449437453913660245548976840654448064743724336468816334524715111720611435734563156331609491691704534645714754465425646410709314205109117349533396829863120770668620475759872171011681774604056460389604553345995915850008712674030704273131698929874689758834298774126545461677772945079340067678699983246788749235883368010964192188725685203877395814283148400139545661551657124052623456711413035610725757672429475327836106204777176619714224376837499883558635715904355887729916245326189040655811730030473377065117305792009942922687203780049466401833001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07d284b5d77984ae9a4bfa54b0b8763636783e50
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idal.uv.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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