agenda.garr.it

- Consortium GARR -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 9f:0f:32:05:06:e5:24:b4:fc:96:a7:24:ec:8d:7f:c4 was issued on by GEANT Vereniging.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Consortium GARR

Organization: Consortium GARR
Address: Via dei Tizii 6
Postal code: 00185
Locality: Roma
Country: IT

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 9f:0f:32:05:06:e5:24:b4:fc:96:a7:24:ec:8d:7f:c4
Serial Number (int): 211426150301434568776404221149194321860
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: cb:f3:31:12:b0:6f:5f:02:ed:1e:37:ec:4b:6b:8d:ad:ca:8a:be:8b
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): e6:a8:47:f4:3f:fa:7c:c2:a3:a2:dc:96:bc:cc:d6:f5:99:9e:26:c6
Fingerprint (sha256): 03:eb:2d:0f:54:35:85:54:75:f5:16:90:b3:8c:b6:38:52:1f:47:75:b7:eb:ad:01:60:06:de:c6:0c:a1:fe:ab

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate agenda.garr.it

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for agenda.garr.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agenda.garr.it
agsrv.dir.garr.it
www.agenda.garr.it

Other certificates including the domain name garr.it

(limited to 100 certificates)
co.aai.garr.it
learning.garr.it
wiki.garr.it
st-be-ba1-test.infra.garr.it
idp-ospedalesanmartino.irccs.garr.it
idp-iov.irccs.garr.it
idp-css.irccs.garr.it
wkngx2.garr.it
mx2.dir.garr.it
www.garr.it
filesender-test.infra.garr.it
garrbox.garr.it
idp-ubuntu.aai-test.garr.it
test.webmeetings.garr.it
agenda.garr.it
git.garr.it
idp-neuromed.irccs.garr.it
filesender-test.infra.garr.it
enea.workplace.garr.it
dashboard-devel-mellon.cloud.garr.it
gbox.garr.it
dashboard-staging-idem.cloud.garr.it
ca.garr.it
icdi.workplace.garr.it
idp311.idem.garr.it
wiki.garr.it
idp-oasi.irccs.garr.it
vpnsrv.garr.it
webmeetings.garr.it
cartellino.dir.garr.it
keystone-staging.cloud.garr.it
cloud.garr.it
demo-idp.ct1.garrservices.it
eosc.eu
vconf.garr.it
open.meet.garr.it
hv02b-mgmt.bo1.infra.garr.it
eosc.workplace.garr.it
wiki.idem.garr.it
grouper.idem.garr.it
wayf.idem-test.garr.it
pexip-mgmt.infra.garr.it
git.garr.it
le1.test.garr.it
idpopen.garr.it
hv02c.bo1.infra.garr.it
idp-css.irccs.garr.it
aarc-satosa.aai-test.garr.it
idp-maugeri.irccs.garr.it
idp-stellamaris.irccs.garr.it
sg-liferay.garr.it
meeting01.garr.it
www.idem.garr.it
cert.garr.it
rancher.infra.garr.it
idp311.idem.garr.it
idp-fbf.irccs.garr.it
wayf.idem-test.garr.it
grouper.idem.garr.it
sg-liferay.garr.it
lx5.dir.garr.it
hv02d-mgmt.bo1.infra.garr.it
printers.dir.garr.it
wkngx1.garr.it
hv03a.bo1.infra.garr.it
wiki.idem.garr.it
*.mirror.garr.it
vpnops.dir.garr.it
icdi.workplace.garr.it
gridsrv3-4.dir.garr.it
garr.workplace.garr.it
idp-sicilia.izs.garr.it
onlyoffice.cloud.garr.it
idp-fticks-test.aai-test.garr.it
login.sso.garr.it
idp-portici.izs.garr.it
rinnovoconvenzioni.garr.it
www.idem.garr.it
www.support.garr.it
wireless.dir.garr.it
turn-02-preprod.meet.garr.it
gn4-3.workplace.garr.it
registry.idem.garr.it
hv01d-mgmt.bo1.infra.garr.it
idp-sdn.irccs.garr.it
dashboard-staging.cloud.garr.it
sp24-test.garr.it
metadata.dir.garr.it
idp-ieo.irccs.garr.it
idp-css.irccs.garr.it
agenda.garr.it
garr.it
grouper.idem.garr.it
filesender.garr.it
kibana.aai.garr.it
primologin-gbox.garr.it
idp-iccu.beniculturali.garr.it
learning.garr.it
gn4-3.workplace.garr.it
dashboard.cloud.garr.it

Certificate

The complete raw certificate details for agenda.garr.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 211426150301434568776404221149194321860
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00185'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Via dei Tizii 6'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Consortium GARR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'agenda.garr.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 847091054571555368466717284029940526948987748491988326775058002780495005789353171628197341609226793808796134116402321380300265320172678395865050685685284852560458008170808626185664069915260968400706187142618108403724852283269155144824364113032953911665404980478993286250087729538846012663628279911832711469674278071972237823688953937556472358555759690945028355807606832383868775835430776043729762665843673472356487569467250757701800613261603194207550426412761022967482098013564580118274056902277470672136261845168273181540981909506772170803100752919805693805491492023591337697377358432569140537243512942206033941183808420408057066778038644192397822000305581608679103259821245588144592357966844481371046126993156922576397394252705858690069920684501710834365774280409792613711181186069534477623472135494384836081420933793428662208695764750127578181035496042069913974758728926415927608975056970136218755867311025875135725984866935823447044387406145814014677080158352488563394300263561460456562658422643388858515820338795838211799501583724184364031298697326445271177713445610109725021107431752905101390271360561232011922734794634710790381865927285905367396965812106084717545615242293503336997454573584313497732933853514362550628447861751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cbf33112b06f5f02ed1e37ec4b6b8dadca8abe8b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000175fec49fcb0000040300473045022016d1669cad0641a19c2c8e1a871268062f88f776b7d5dfb7e93bdafdc604faeb022100b128b88f55f15456ce545e56119490aa5989d31f8c84bc9621ac7528cbffb8460075009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000175fec49ff200000403004630440220656f63d2353c949a44a322026dabf951625ccf2dd9055185ad1a6f0fd273ac9b02204f07253b2f3b0ebcf3c770ebc3a6888d05c2cf077b2cea60d49bc583cc79e313
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenda.garr.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agsrv.dir.garr.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agenda.garr.it'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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