p4test25.uni-freiburg.de

- Albert-Ludwigs-Universität Freiburg -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 5b:fc:5d:3e:22:c0:44:88:62:4c:27:61:21:58:8a:f0 was issued on by GEANT Vereniging.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Albert-Ludwigs-Universität Freiburg

Organization: Albert-Ludwigs-Universität Freiburg
State / Province: Baden-Württemberg
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 5b:fc:5d:3e:22:c0:44:88:62:4c:27:61:21:58:8a:f0
Serial Number (int): 122270097611772264214427335365200743152
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 64:93:ce:14:74:74:83:b2:49:d6:3d:93:67:fc:5e:4a:2a:85:17:f6
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 2d:06:05:4b:0a:7d:25:07:59:b7:19:85:37:6a:b2:f2:98:f1:dc:4b
Fingerprint (sha256): 05:3b:6b:f2:60:28:a5:de:e7:84:13:9f:07:88:83:ff:1a:10:47:22:2d:9f:08:d5:b9:93:2e:bc:0c:6f:11:a8

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate p4test25.uni-freiburg.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for p4test25.uni-freiburg.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

p4test25.uni-freiburg.de

Other certificates including the domain name uni-freiburg.de

(limited to 100 certificates)
smartexerg14.imtek.uni-freiburg.de
cggitlab.informatik.uni-freiburg.de
zu.ub.uni-freiburg.de
hrk01.ukl.uni-freiburg.de
www.math.uni-freiburg.de
stalker.uni-freiburg.de
compendium-heroicum.de
oc.informatik.uni-freiburg.de
www3.psychologie.uni-freiburg.de
ad-websvn.informatik.uni-freiburg.de
wolke.fdm.uni-freiburg.de
yourls.ub.uni-freiburg.de
diz-nlp.ukl.uni-freiburg.de
www.metabolism.uni-freiburg.de
rewind.tf.uni-freiburg.de
bwcloud.ruf.uni-freiburg.de
web05.campus.uni-freiburg.de
dhcp.fun.uni-freiburg.de
weather.uni-freiburg.de
www.ilias.uni-freiburg.de
lmegit.ikoop.uni-freiburg.de
survey.vm.uni-freiburg.de
mail.uni-freiburg.de
webserver.uni-freiburg.de
uc-ccxs02.ukl.uni-freiburg.de
intranet.ukl.uni-freiburg.de
u-asta.uni-freiburg.de
ilias.uni-freiburg.de
ckan.anthropologie.uni-freiburg.de
cip.physik.uni-freiburg.de
hugel-wiki.physchem.uni-freiburg.de
uc-cmsdb1.ukl.uni-freiburg.de
alexa.informatik.uni-freiburg.de
www.ffp.uni-freiburg.de
zope-vip1.ruf.uni-freiburg.de
kis-aimapp1-t.ukl.uni-freiburg.de
hdcampus.ub.uni-freiburg.de
mylogin-dev.ub.uni-freiburg.de
stk.ub.uni-freiburg.de
oo.quarep.org
biblio.ub.uni-freiburg.de
chir-syn-03.ukl.uni-freiburg.de
uni-freiburg.de
venus.uni-freiburg.de
git.laurel.informatik.uni-freiburg.de
nuf.uni-freiburg.de
chir-syn-01.ukl.uni-freiburg.de
m5.uni-freiburg.de
www.brainlinks-braintools.uni-freiburg.de
enternix.intra.uni-freiburg.de
accloud.informatik.uni-freiburg.de
mail.stura.uni-freiburg.de
webserver.uni-freiburg.de
sp-sql.ub.uni-freiburg.de
www.umfrage.empiwifo.uni-freiburg.de
fachschaft.informatik.uni-freiburg.de
dhcp.fun.uni-freiburg.de
mif.uni-freiburg.de
www.hydro-lehre.uni-freiburg.de
janus.fachschaft.tf
pcl.physchem.uni-freiburg.de
biom128.imbi.uni-freiburg.de
docata.zv.uni-freiburg.de
biom134.imbi.uni-freiburg.de
webserver.uni-freiburg.de
www.webserver.uni-freiburg.de
webserver.uni-freiburg.de
bwservices-test.uni-freiburg.de
scm-gamma.physchem.uni-freiburg.de
ox.informatik.uni-freiburg.de
ukl-netscaler-a.ukl.uni-freiburg.de
meonas.ukl.uni-freiburg.de
geographie.uni-freiburg.de
fachschaft.informatik.uni-freiburg.de
shop.uni-freiburg.de
dstip.verwaltung.uni-freiburg.de
kis-icw-pat-t.ukl.uni-freiburg.de
www.wohnungsdatenbank.uni-freiburg.de
cci-c3.ukl.uni-freiburg.de
krz-pms-build.ukl.uni-freiburg.de
bfg.uni-freiburg.de
myadmin.ub.uni-freiburg.de
mysql.ruf.uni-freiburg.de
myaccount.vm.uni-freiburg.de
db.fachschaft.tf
moca.phil2.uni-freiburg.de
logik.mathematik.uni-freiburg.de
ad-backup1.cs.uni-freiburg.de
geographie.uni-freiburg.de
peatmoss.plantcode.cup.uni-freiburg.de
cumulus.biologie.uni-freiburg.de
cci-01b-0-1.ukl.uni-freiburg.de
p4test25.uni-freiburg.de
xgrid04.ruf.uni-freiburg.de
mail.bio.chemie.uni-freiburg.de
hugel-wiki.physchem.uni-freiburg.de
wolke.fdm.uni-freiburg.de
www.liquidity-risk.uni-freiburg.de
msm10.ukl.uni-freiburg.de
jip-mr.ukl.uni-freiburg.de

Certificate

The complete raw certificate details for p4test25.uni-freiburg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmgdd3Azc2tz2YG1wkj8
tASGp5cluVGNhlawBPxjzxlilVAGyYdmVy6g6gGhJ49yFTSdSYPMoPT4/JqC6un0
V1KLFg6cBnyszXbmzeld0rUAS/H0Lr693U7O+Kj4nsvgzm0a7KU//I2iuYYBFy4r
V9netc/dMGAWQ2pEJFTB67JO1WkkKf/6dTccETglp1Y8s868CrkC77zNGGu2LQ19
/brsOVJFCw1or0f6s0BhBat5h28ADC5idYgmXfU0lM1nMbq86Cnc4uBmoJXGihxQ
Zz3euYRgLf39VQyvKU5XwPudD4uSXrH5xew0F9x0cgap8uZa7PMzDfIasUuXowK2
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 122270097611772264214427335365200743152
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Albert-Ludwigs-Universität Freiburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'p4test25.uni-freiburg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19996993255796226269953946361333090673252852680600662793778163230702139375984140394979298343731862455344551933722523649900552095700108327479767837023538219526167212011292674945218260186516005303201359337222837408622417330799144868638421025185173273979211868119279473355955293434332003353974202822770931883327687709946575664067391656374477358066277858583259111120922696197514840832791491935094647976613949253448280756724595616511852502207115392332343521693745516104648803557626392700798907058652463400205876203272628972295036042922329029918589004987852968713351577952997889257341451149252120713216537826527417047627407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6493ce14747483b249d63d9367fc5e4a2a8517f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p4test25.uni-freiburg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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