ppm1.tudelft.nl

- Technische Universiteit Delft -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number ba:37:fe:0d:66:67:0b:04:4d:eb:03:15:64:c2:06:49 was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Technische Universiteit Delft

Organization: Technische Universiteit Delft
State / Province: Zuid-Holland
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): ba:37:fe:0d:66:67:0b:04:4d:eb:03:15:64:c2:06:49
Serial Number (int): 247527136336911250476031738254874248777
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d0:1d:63:db:d0:0c:de:d8:83:ae:74:91:f6:cc:1c:f5:43:d9:9b:b9
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 2a:95:59:78:3d:8f:da:18:b5:70:32:22:32:1a:1b:c7:e8:7e:b6:ef
Fingerprint (sha256): 05:4a:60:cd:15:8d:2e:5c:1b:3a:c3:da:57:4d:58:77:74:d6:7a:cd:82:32:c6:1b:37:5d:a5:bb:86:d2:b4:ca

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate ppm1.tudelft.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ppm1.tudelft.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ppm1.tudelft.nl

Other certificates including the domain name tudelft.nl

(limited to 100 certificates)
solidstate.quantumtinkerer.tudelft.nl
api.p-cube.gamelab-staging.tbm.tudelft.nl
bepsys.ewi.tudelft.nl
webdsl-org.ewi.tudelft.nl
talentservices.tudelft.nl
wism8.dunet.tudelft.nl
www.pp1.tudelft.nl
suslabnwe-en.io.tudelft.nl
eipdev.ewi.tudelft.nl
quantumtinkerer.tudelft.nl
www.hooke.tudelft.nl
mattermost-imphys.tudelft.nl
3d.bk.tudelft.nl
hpcwiki.tudelft.nl
suslabnwe-de.io.tudelft.nl
externenmds.tudelft.nl
webdsl-2015.ewi.tudelft.nl
telefoonboek.tudelft.nl
searchenginewis2.ewi.tudelft.nl
se.ewi.tudelft.nl
ipms-prd1.tudelft.nl
bitrix24.tbm.tudelft.nl
punch.tudelft.nl
oauth-t.tudelft.nl
inforln.tudelft.nl
3d.bk.tudelft.nl
bktoi1.bk.tudelft.nl
abdowiki.tudelft.nl
www.broach.nl
webapp.tudelft.nl
demoprojects.tudelft.nl
telewerken.tudelft.nl
pl-jenkins.ewi.tudelft.nl
bbtest.tudelft.nl
marsrv.tudelft.nl
4tudata-libbuild.tudelft.nl
inforln.tudelft.nl
mod-est.tbm.tudelft.nl
coin2013-prima.tudelft.nl
syllabus.tudelft.nl
aecoderunner.lr.tudelft.nl
erfgoed.tudelft.nl
www.civielebedrijvendagen.nl
was.tudelft.nl
sysadminwiki.tudelft.nl
esb-gateway.tudelft.nl
www.vvtp.tudelft.nl
services.sc.tudelft.nl
3d.bk.tudelft.nl
campusdevelopment.tudelft.nl
marsrv.tudelft.nl
svn.3me.tudelft.nl
lamp6.tudelft.nl
svn.tnw.tudelft.nl
www.dined.nl
dutmail.tudelft.nl
b2bcrm.tudelft.nl
www.nas.ewi.tudelft.nl
b2bcrm.tudelft.nl
qutech.tudelft.nl
personeelsdossiers.tudelft.nl
zandmotor-libtest.tudelft.nl
www.beeldportal.tudelft.nl
labservant.tudelft.nl
lampict2.tudelft.nl
coursemaptest.tudelft.nl
se.ewi.tudelft.nl
presto.tudelft.nl
3d.bk.tudelft.nl
www.punch.tudelft.nl
reservation.ekl.tudelft.nl
qit.ewi.tudelft.nl
elearning-libprod.tudelft.nl
www.praktischestudie.nl
handler.tudelft.nl
matchmakers.ewi.tudelft.nl
newmediacentre.tudelft.nl
burgerbegroting.tbm.tudelft.nl
www.broach.nl
ismir2019.ewi.tudelft.nl
sg-4.tbm.tudelft.nl
srv775-2.tudelft.net
www.dcsc.tudelft.nl
ppm1.tudelft.nl
lts1-test.tbm.tudelft.nl
inclusivedesign.io.tudelft.nl
visit.tudelft.nl
eurasipdev.ewi.tudelft.nl
ei.tudelft.nl
elearning-libaccp.tudelft.nl
www.practischestudie.nl
api.myota-test.tudelft.nl
svn.bk.tudelft.nl
gnss1.tudelft.nl
luistermutant.gamelab.tbm.tudelft.nl
filr.tudelft.nl
trendhost-cb.tudelft.nl
www.punch.tudelft.nl
research.tudelft.nl
osidoc.tudelft.nl

Certificate

The complete raw certificate details for ppm1.tudelft.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTC+E8T+0dMlxtZ1ck7o
yiomwFUKjPMG63rqzLOtZHHbNbNJyW6ULxaOa0X93Es1obxWXyj7HWig9NihPJOP
SSlFJTSuAsT6wuuKfbMhqgcknVuAwiuZ1Ys41aIzHB87RwYxRV78bW5mcauVEEuZ
eP+OiYHGA2TWJPdu1Ubut+9qFoldyzA5br/LCwusheQ4VuQ3TMFksu53u8zggvRD
DnwD6lXq1M4iiiwBPumxykQbImY70N8uPtRwr4fWWNYHgBFMFxqCSHVSB6q2GKgy
KoY8d0rw9a3cbAid8bU4+fwiT+H3m2KjCZZo17C2TW/YzPo3VFxw0XP6mxvmmEkm
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 247527136336911250476031738254874248777
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technische Universiteit Delft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ppm1.tudelft.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21863262576359538091436541384789447950030369874118913093776489124259066212605113054464200439808407473682692275962899937234079565414609077900838849707882909520559957682860707152974177094448921866340499481850818941021490081222233215020032832047496896647922979134156369978602102877182450924169599007341634348961104964730851653033933045891119062834763590437371999443113432388111814744882883134043522470865554889114447228675308710581708658048834222175340681163487052752568752766905242389877943543092639126498253748386404965036784013017990664399429839621047311173792719033282542406844479194181264575441641943337566697236147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d01d63dbd00cded883ae7491f6cc1cf543d99bb9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppm1.tudelft.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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