healthpsychology.cmb.med.rug.nl

- Rijksuniversiteit Groningen -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number ee:c1:9e:bf:fa:d4:9d:d0:24:8b:62:29:04:d3:f1:43 was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Rijksuniversiteit Groningen

Organization: Rijksuniversiteit Groningen
State / Province: Groningen
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): ee:c1:9e:bf:fa:d4:9d:d0:24:8b:62:29:04:d3:f1:43
Serial Number (int): 317361596121431906652016382938419818819
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 60:83:c5:85:02:f0:f2:6e:47:0e:1b:05:6c:19:81:e6:be:0d:cf:9d
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 25:ce:04:22:7b:e6:b0:4b:6f:1f:45:30:a1:8d:f3:bb:06:f7:85:8f
Fingerprint (sha256): 05:3a:b6:00:04:d5:0f:96:26:19:8b:a5:74:bb:60:55:05:7d:97:e8:cc:45:ee:2a:75:44:73:70:d4:f6:8b:ed

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate healthpsychology.cmb.med.rug.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for healthpsychology.cmb.med.rug.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

healthpsychology.cmb.med.rug.nl

Other certificates including the domain name rug.nl

(limited to 100 certificates)
webhost12.service.rug.nl
fssc.gai.rug.nl
ag.id.rug.nl
molgenis21.gcc.rug.nl
menu.ub.rug.nl
*.test.euclid.astro.rug.nl
sandbox-ssh.web.rug.nl
registry.webhosting.rug.nl
signon.rug.nl
molgenis104.gcc.rug.nl
rooster.rug.nl
fwn-biol-144-174.biol.rug.nl
topdesk.service.rug.nl
russischcentrum.ub.rug.nl
pan-209.nema.rug.nl
es-testdev01.ucms.rug.nl
dnpprepo.ub.rug.nl
test-sp.ucms.rug.nl
molgenis114.gcc.rug.nl
mijnrugpas.rug.nl
iwi232.iwinet.rug.nl
molgenis53.target.rug.nl
www.let.rug.nl
toptst01.serverspace.rug.nl
geo-test.rug.nl
cfs001.workspace.rug.nl
rabbitmq.web.rug.nl
molgenis14.target.rug.nl
monk.hpc.rug.nl
molgenis112.gcc.rug.nl
molgenis66.gcc.rug.nl
tst-idp.id.rug.nl
wordrobe.housing.rug.nl
new.tweets.dnpp.ub.rug.nl
gaiisap1.rcbiv.rug.nl
streaming13.serverspace.rug.nl
gaiisap1.rcbiv.rug.nl
doi.ub.rug.nl
molgenis113.gcc.rug.nl
webhost-ng.service.rug.nl
flexo.gcc.rug.nl
healthpsychology.cmb.med.rug.nl
apodat.iadb.nl
webhost3.service.rug.nl
survey.ai.rug.nl
acc-ugp.ub.rug.nl
examspace.vpn.rug.nl
molgenis109.gcc.rug.nl
meet.web.rug.nl
mypc1.service.rug.nl
molgenis70.gcc.rug.nl
share.ub.rug.nl
urd2.let.rug.nl
student.rug.nl
web2-prod.gai.rug.nl
profiling.hpc.rug.nl
mijnrugpas.rug.nl
orbishistorical.ub.rug.nl
rechtenscripties.eprints.rieven.ub.rug.nl
pmb.let.rug.nl
beaker.service.rug.nl
rng.gmw.rug.nl
trr-ev.id.rug.nl
xfactor.rug.nl
wencke4.housing.rug.nl
ads005.workspace.rug.nl
molgenis13.gcc.rug.nl
molgenis60.target.rug.nl
oasback.gai.rug.nl
libcal.rug.nl
molgenis01.gcc.rug.nl
acc-vvd.ub.rug.nl
pwstst.gai.rug.nl
horafinita.rug.nl
archresc2.service.rug.nl
cit-toasta1.serverspace.rug.nl
lb-ces-acc.ucms.rug.nl
pan.service.rug.nl
ocmp.phys.rug.nl
depa-images.ub.rug.nl
signal.web.rug.nl
chat.astro.rug.nl
rugpasfoto.webhosting.rug.nl
git.lwp.rug.nl
edusupport.rug.nl
gadgets.rug.nl
ocmp.phys.rug.nl
zabbix-cit.service.rug.nl
scoop-portal.data.rug.nl
test-pure-form.ub.rug.nl
bi.gai.rug.nl
molgenis97.gcc.rug.nl
molgenis04.target.rug.nl
mailserver.astro.rug.nl
poewaai.ub.rug.nl
personeel.ub.rug.nl
rl01.gai.rug.nl
dzn.eldoc.ub.rug.nl
support.horafinita.ub.rug.nl
urendeclaratie.gai.rug.nl

Certificate

The complete raw certificate details for healthpsychology.cmb.med.rug.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317361596121431906652016382938419818819
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Groningen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rijksuniversiteit Groningen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'healthpsychology.cmb.med.rug.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 607953367383266356879312853991114700214223986533851014832506199279225536914305785047650468531265088431230984404102966091937495237640547131707405246905226986395939468988356008250229977489960838149571849117216767351550073061121479335981091682848951186919997235314185621701964838596199121203268142411523734512575786647302879313304982193234609863427033794728420623748228234640201248231200433954036701874070946053053360843202390981325582687002779475159708627116114600540818471018758794960095846868458742382411323277816923316132652349840185788864150464206597788472256606863168017672772076544153325863954493860986719845062788828565746446547383578546257655556763238714095489976590275861928089059634003334098627510407003766145455388476306347650431394466840364483608344307635106912492882223782614748505233162346811279389345657801492920971176513269245980342752042610668030370581584513235628478842745084312895378186774099845740042554905799703230203257095504040298094587813916787695507894939839067785640907473995504804663669496871913824558006634463815437094160637717889520401832498171122384805091790112782541610253701011676355761993080033982658055427921290466990708609701115089241188913993940946092477895768764242511095541616269962032296722263261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6083c58502f0f26e470e1b056c1981e6be0dcf9d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001836a61a0a600000403004830460221008aef64bab4a3d5088466bf6eade7022eb4c983183eea651174b5edda1032ccec022100c8c39f10a07a84a764e6a5a44867f753ab04e421ac96b35edfa2f3670fc51f4c0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001836a61a06a000004030046304402202f9e9624e47b75bdc5bae2d89c73871ad0d4b0f3aa862812ffad0bf2e39dd180022007024e112daaaac8e5de6518cc87edd432777c1e0c95b36aa5b754bf7300d373007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001836a61a03d00000403004730450220369420a4a216ebebb8b7e6f86901302583066214f0f963980e018cc8c95c7fb0022100ab5ed8070a854e9169356e775fea26ea141da50c82cd5934bda60ddf8fd22b7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthpsychology.cmb.med.rug.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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