jpo.insa-lyon.fr

- Institut National des Sciences Appliquées de Lyon -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 42:43:1b:c9:e7:43:2f:fb:54:14:19:c3:08:47:18:52 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Institut National des Sciences Appliquées de Lyon

Organization: Institut National des Sciences Appliquées de Lyon
Organization unit: API
State / Province: Auvergne-Rhône-Alpes
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 42:43:1b:c9:e7:43:2f:fb:54:14:19:c3:08:47:18:52
Serial Number (int): 88077495232818506911056956239399819346
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 73:2e:3e:8d:fd:d0:d0:11:f5:8a:2b:fb:b3:80:61:d3:f5:c1:57:32
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 23:d6:19:f3:26:b0:50:9f:37:74:11:ae:31:1b:c3:f5:cb:71:42:ae
Fingerprint (sha256): 03:ed:6e:00:6f:8e:60:82:11:f6:61:2a:c3:33:7d:96:5f:5a:d5:cd:9b:e1:ff:fa:62:e4:ac:dc:3d:43:9c:8d

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate jpo.insa-lyon.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jpo.insa-lyon.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jpo.insa-lyon.fr
www.jpo.insa-lyon.fr

Other certificates including the domain name insa-lyon.fr

(limited to 100 certificates)
insa-dpadsvil1-01.insa-lyon.fr
cocovn.insa-lyon.fr
www.insa-lyon.fr
reportserver.insa-lyon.fr
reve.insa-lyon.fr
mouvinsa.insa-lyon.fr
gofast.insa-lyon.fr
tc-net2.insa-lyon.fr
reve.insa-lyon.fr
orioai.insa-lyon.fr
telecom.insa-lyon.fr
insa-fd.insa-lyon.fr
svn.insa-lyon.fr
tux.creatis.insa-lyon.fr
jpo.insa-lyon.fr
exal.insa-lyon.fr
vk2000-v6.insa-lyon.fr
aip-primeca.insa-lyon.fr
insa-vcvil1-01.insa-lyon.fr
lamcosbao.insa-lyon.fr
ecole-ete.insa-lyon.fr
myriad.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
servif-cocktail.insa-lyon.fr
dsi.insa-lyon.fr
wiki-dsi.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
desk.creatis.insa-lyon.fr
gtwresd.insa-lyon.fr
sgd.insa-lyon.fr
mediacenter.insa-lyon.fr
aip-foad-web.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresc.insa-lyon.fr
vk2-gm-72.insa-lyon.fr
deep.insa-lyon.fr
cipcnet.insa-lyon.fr
fondation.insa-lyon.fr
insa-vxrmgrvil1-01.insa-lyon.fr
fimi2i.insa-lyon.fr
intranetgi.insa-lyon.fr
liris-ktbs01.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
insa-vxrvil1-06.insa-lyon.fr
*.insa-lyon.fr
dsi-ipam.insa-lyon.fr
*.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
helpdesk.insa-lyon.fr
insa-rproxy-01.insa-lyon.fr
fex.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
*.docelec.insa-lyon.fr
tux.creatis.insa-lyon.fr
reportserver.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
catalogue.insa-lyon.fr
biosciences.insa-lyon.fr
tux.creatis.insa-lyon.fr
dsi-esb.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
gfc-services-test.insa-lyon.fr
biosciences.insa-lyon.fr
mandril.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresh.insa-lyon.fr
phishing.insa-lyon.fr
cipcnet.insa-lyon.fr
insa-rproxypp-01.insa-lyon.fr
smtp6.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
lune.insa-lyon.fr
virtualstudyfair.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
aris-connect.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
intranetgi.insa-lyon.fr
desk.creatis.insa-lyon.fr
glpi.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
instrumentation.insa-lyon.fr
dsi-gitlab.insa-lyon.fr
phishing.insa-lyon.fr
lire-pp.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
lire.insa-lyon.fr
redmine-pp.insa-lyon.fr
fex.insa-lyon.fr
insa-ppsympa.insa-lyon.fr
casi.insa-lyon.fr
acdc.creatis.insa-lyon.fr
openreports.insa-lyon.fr
*.docelec.insa-lyon.fr
camus.creatis.insa-lyon.fr
departements.insa-lyon.fr

Certificate

The complete raw certificate details for jpo.insa-lyon.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 88077495232818506911056956239399819346
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auvergne-Rhône-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Institut National des Sciences Appliquées de Lyon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'API'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jpo.insa-lyon.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781784704762493167920114875077690893757339605384081594187792562564198825149559918963162708257747449633550206423551659856693810853270255838031881517994307880312181634165336940284704949565530573556231197737214311107154938702869845754162922121746931567409253628323938133612405924623464677051720451410372152761607576394750315555032487558410571389143236003313926540478687647200698685764439331111854020975135236716501934526600965730149737292594068868336344837671150342496456054876786170661376763208669243496347708677180540356664006565524541035102106815362826583514673731676232420517859463123715285960019349848039583466085412022929562189346145034483610831324540001916648184845836065233399388213072859052803013015018866459588975103745573812319052167721697129942737771292899059383816606037917974773129254738556925362841236087827562386938183489956121159077259091413159424677390775164115151753893583795047427391829678048265736886967862641252167715169121919184285975354685343493566737151396858838720804752553688863732976222626113794986295485798380615297140698394641045938582080084087648374183416321727232658744681918617683750022888472248937994819037183245604193556967129766889605426967777167807360968179414980432865645942797478897771775225062063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							732e3e8dfdd0d011f58a2bfbb38061d3f5c15732
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpo.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jpo.insa-lyon.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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