git.garr.it

- Consortium GARR -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 90:e1:41:04:e0:c3:a2:a0:ec:98:60:fb:ea:56:cd:49 was issued on by GEANT Vereniging.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Consortium GARR

Organization: Consortium GARR
State / Province: Lazio
Country: IT

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 90:e1:41:04:e0:c3:a2:a0:ec:98:60:fb:ea:56:cd:49
Serial Number (int): 192578416929296260056906393083920698697
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 46:c8:9d:a3:88:5a:54:a7:42:aa:11:14:7a:5a:bb:62:9a:59:1d:cf
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 63:34:1f:99:14:a9:a1:5d:fb:75:55:29:dc:2b:f1:38:3f:30:11:33
Fingerprint (sha256): 04:51:3c:55:c4:b8:19:c6:86:f0:8d:fc:3a:cc:4e:25:a3:4f:51:70:cc:eb:a1:d2:fd:46:cf:3e:50:42:a9:b0

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate git.garr.it

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for git.garr.it

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

git.garr.it
gitlab.cloud.garr.it
gitlab.ct1.garrservices.it
gitlab.global.garrservices.it
gitlab.na2.garrservices.it
gitlab.pa1.garrservices.it
gitlab.rm1.garrservices.it

Other certificates including the domain name garr.it

(limited to 100 certificates)
co.aai.garr.it
learning.garr.it
wiki.garr.it
st-be-ba1-test.infra.garr.it
idp-ospedalesanmartino.irccs.garr.it
idp-iov.irccs.garr.it
idp-css.irccs.garr.it
wkngx2.garr.it
mx2.dir.garr.it
www.garr.it
filesender-test.infra.garr.it
garrbox.garr.it
idp-ubuntu.aai-test.garr.it
test.webmeetings.garr.it
agenda.garr.it
git.garr.it
idp-neuromed.irccs.garr.it
filesender-test.infra.garr.it
enea.workplace.garr.it
dashboard-devel-mellon.cloud.garr.it
gbox.garr.it
dashboard-staging-idem.cloud.garr.it
ca.garr.it
icdi.workplace.garr.it
idp311.idem.garr.it
wiki.garr.it
idp-oasi.irccs.garr.it
vpnsrv.garr.it
webmeetings.garr.it
cartellino.dir.garr.it
keystone-staging.cloud.garr.it
cloud.garr.it
demo-idp.ct1.garrservices.it
eosc.eu
vconf.garr.it
open.meet.garr.it
hv02b-mgmt.bo1.infra.garr.it
eosc.workplace.garr.it
wiki.idem.garr.it
grouper.idem.garr.it
wayf.idem-test.garr.it
pexip-mgmt.infra.garr.it
git.garr.it
le1.test.garr.it
idpopen.garr.it
hv02c.bo1.infra.garr.it
idp-css.irccs.garr.it
aarc-satosa.aai-test.garr.it
idp-maugeri.irccs.garr.it
idp-stellamaris.irccs.garr.it
sg-liferay.garr.it
meeting01.garr.it
www.idem.garr.it
cert.garr.it
rancher.infra.garr.it
idp311.idem.garr.it
idp-fbf.irccs.garr.it
wayf.idem-test.garr.it
grouper.idem.garr.it
sg-liferay.garr.it
lx5.dir.garr.it
hv02d-mgmt.bo1.infra.garr.it
printers.dir.garr.it
wkngx1.garr.it
hv03a.bo1.infra.garr.it
wiki.idem.garr.it
*.mirror.garr.it
vpnops.dir.garr.it
icdi.workplace.garr.it
gridsrv3-4.dir.garr.it
garr.workplace.garr.it
idp-sicilia.izs.garr.it
onlyoffice.cloud.garr.it
idp-fticks-test.aai-test.garr.it
login.sso.garr.it
idp-portici.izs.garr.it
rinnovoconvenzioni.garr.it
www.idem.garr.it
www.support.garr.it
wireless.dir.garr.it
turn-02-preprod.meet.garr.it
gn4-3.workplace.garr.it
registry.idem.garr.it
hv01d-mgmt.bo1.infra.garr.it
idp-sdn.irccs.garr.it
dashboard-staging.cloud.garr.it
sp24-test.garr.it
metadata.dir.garr.it
idp-ieo.irccs.garr.it
idp-css.irccs.garr.it
agenda.garr.it
garr.it
grouper.idem.garr.it
filesender.garr.it
kibana.aai.garr.it
primologin-gbox.garr.it
idp-iccu.beniculturali.garr.it
learning.garr.it
gn4-3.workplace.garr.it
dashboard.cloud.garr.it

Certificate

The complete raw certificate details for git.garr.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAqEgVHnPjVfSG+LOjDTNe
G9Wl9hCbAnHAN236zZIMRmWecRrIkVz0Qpjz6a7KktpNyJ1AUb0s03YoOivRocny
liSaTZ7qW/EqjCi17q1zsC5T3FqEuiEd9jLn0IfNe7OhOmr5Z1D+9kjM+Kag9mhK
sMQkz+F+C5nR2NWnfBJHqmEuIemDxEgOni8W8ynet7fvmH9GDTDAzqmsMK6ku/ds
t6k77t6p3fENW6q6LwpbqxiNuXX/52QVqWihtH79FpwLQI2Ct9UwQNUoy9Eo5TVQ
EX7LwNRESAkAgfrUIx86oKbEkYMQvyhVROjgBWzJPyi3D9H7J4ujj+gPuq7OvlMa
mmShOqKt1p1qso2GWD5ihYMUlXFbiKn1st2uSRCJ13AWY2cur8+7TOSsfwBVhoV+
xfTecjRtjBYJmaYkrnUbSaNBHYt6LvseRHjmytRAGGVKz8Rr52zAKyY5/0cpRmNH
6fV3EgiKCF8Ms3v/RS1NFOnGwTalDinkxD5/94vb8bTzAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 192578416929296260056906393083920698697
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lazio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Consortium GARR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'git.garr.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3818943871297238510334232072518789064698786248704972463798471353006962310902515977031369461457372757812985399387730204399368969391367112649025645382419129826145809362758955500866972954338898509001137159913246052832527136414873180953352764015276407446882912930712809828023128396313054000697678063368709748087647124665094414260332529095106872665785542033245588124842387210099108645683514809542030056363914981349263696292877429480429075367077718068349989214987705580180768247774680704179641621571163077758449714386796392828651264419264167045460808897484699052285984881289834905900457921987280035629977357073089898035545725972696979798373945254339871186577034105158955478474779023701483778796746514422074139699519581549939900191727850330008270592947274936854357542782169722267062562146996823480730190543723476317503796359668314389292078061795360218469963262485810780875107543502355288473232703805932091644319334798843527002436851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46c89da3885a54a742aa11147a5abb629a591dcf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (181 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.garr.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.cloud.garr.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.ct1.garrservices.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.global.garrservices.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.na2.garrservices.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.pa1.garrservices.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.rm1.garrservices.it'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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