inclusivedesign.io.tudelft.nl

- Technische Universiteit Delft -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 8b:97:3a:e4:d4:6a:67:fe:58:80:50:08:9d:80:ee:df was issued on by GEANT Vereniging.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Technische Universiteit Delft

Organization: Technische Universiteit Delft
State / Province: Zuid-Holland
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 8b:97:3a:e4:d4:6a:67:fe:58:80:50:08:9d:80:ee:df
Serial Number (int): 185547922749259589669293067221420011231
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 20:1e:aa:6d:da:31:ac:22:84:fa:ed:24:76:18:14:1e:74:a8:ed:67
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 08:f1:3e:a6:8d:58:56:d7:67:0f:e8:4a:a8:a3:a1:f9:f3:2b:46:3d
Fingerprint (sha256): 05:70:d6:ed:d9:46:02:99:45:79:cf:92:e9:4a:1f:55:98:86:e5:f2:35:51:e0:c0:c1:33:27:6d:d2:c0:6c:ef

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate inclusivedesign.io.tudelft.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for inclusivedesign.io.tudelft.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

inclusivedesign.io.tudelft.nl

Other certificates including the domain name tudelft.nl

(limited to 100 certificates)
solidstate.quantumtinkerer.tudelft.nl
api.p-cube.gamelab-staging.tbm.tudelft.nl
bepsys.ewi.tudelft.nl
webdsl-org.ewi.tudelft.nl
talentservices.tudelft.nl
wism8.dunet.tudelft.nl
www.pp1.tudelft.nl
suslabnwe-en.io.tudelft.nl
eipdev.ewi.tudelft.nl
quantumtinkerer.tudelft.nl
www.hooke.tudelft.nl
mattermost-imphys.tudelft.nl
3d.bk.tudelft.nl
hpcwiki.tudelft.nl
suslabnwe-de.io.tudelft.nl
externenmds.tudelft.nl
webdsl-2015.ewi.tudelft.nl
telefoonboek.tudelft.nl
searchenginewis2.ewi.tudelft.nl
se.ewi.tudelft.nl
ipms-prd1.tudelft.nl
bitrix24.tbm.tudelft.nl
punch.tudelft.nl
oauth-t.tudelft.nl
inforln.tudelft.nl
3d.bk.tudelft.nl
bktoi1.bk.tudelft.nl
abdowiki.tudelft.nl
www.broach.nl
webapp.tudelft.nl
demoprojects.tudelft.nl
telewerken.tudelft.nl
pl-jenkins.ewi.tudelft.nl
bbtest.tudelft.nl
marsrv.tudelft.nl
4tudata-libbuild.tudelft.nl
inforln.tudelft.nl
mod-est.tbm.tudelft.nl
coin2013-prima.tudelft.nl
syllabus.tudelft.nl
aecoderunner.lr.tudelft.nl
erfgoed.tudelft.nl
www.civielebedrijvendagen.nl
was.tudelft.nl
sysadminwiki.tudelft.nl
esb-gateway.tudelft.nl
www.vvtp.tudelft.nl
services.sc.tudelft.nl
3d.bk.tudelft.nl
campusdevelopment.tudelft.nl
marsrv.tudelft.nl
svn.3me.tudelft.nl
lamp6.tudelft.nl
svn.tnw.tudelft.nl
www.dined.nl
dutmail.tudelft.nl
b2bcrm.tudelft.nl
www.nas.ewi.tudelft.nl
b2bcrm.tudelft.nl
qutech.tudelft.nl
personeelsdossiers.tudelft.nl
zandmotor-libtest.tudelft.nl
www.beeldportal.tudelft.nl
labservant.tudelft.nl
lampict2.tudelft.nl
coursemaptest.tudelft.nl
se.ewi.tudelft.nl
presto.tudelft.nl
3d.bk.tudelft.nl
www.punch.tudelft.nl
reservation.ekl.tudelft.nl
qit.ewi.tudelft.nl
elearning-libprod.tudelft.nl
www.praktischestudie.nl
handler.tudelft.nl
matchmakers.ewi.tudelft.nl
newmediacentre.tudelft.nl
burgerbegroting.tbm.tudelft.nl
www.broach.nl
ismir2019.ewi.tudelft.nl
sg-4.tbm.tudelft.nl
srv775-2.tudelft.net
www.dcsc.tudelft.nl
ppm1.tudelft.nl
lts1-test.tbm.tudelft.nl
inclusivedesign.io.tudelft.nl
visit.tudelft.nl
eurasipdev.ewi.tudelft.nl
ei.tudelft.nl
elearning-libaccp.tudelft.nl
www.practischestudie.nl
api.myota-test.tudelft.nl
svn.bk.tudelft.nl
gnss1.tudelft.nl
luistermutant.gamelab.tbm.tudelft.nl
filr.tudelft.nl
trendhost-cb.tudelft.nl
www.punch.tudelft.nl
research.tudelft.nl
osidoc.tudelft.nl

Certificate

The complete raw certificate details for inclusivedesign.io.tudelft.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 185547922749259589669293067221420011231
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technische Universiteit Delft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'inclusivedesign.io.tudelft.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 882866818769456807930347071506977760855922006743393667881729642227861589728679606508879844338110820359738473422754047925250888451266705095906246362958463731314318390910597420964184453408005246369168091540351931093127514781551457096110243457327032932130560602566384714960553049689566156882393442713338143626467459971172459488578961558829392555437758666538544335446800487147997996553665419842750338246974213879685534404083326886796858083513610968369135317810431546628021858945146511987314007023543221168663796831691163720808115172333417412829085043761268692841615627642963108305190591357752406763432399362846521863754273391165862029387159271758907189271965576663480428666187486219378668607917989330526829848237004521404944864686268383908485346752178793303310472472160632501535087977181880558560447808617849798731748190730256617521754023506851785362239011442094228160536299462403947641875661053164903904177127571415818003354196140059973139989713939244067893218865011516243270978793219489598505365537009217468777197328933644618407818965806104901667247056445740550023013145178459753149107579239592949904526494802522273076572491570120384309534106395458637448049953393423744714534516667927676776906358939350449240584966021312618851473942099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							201eaa6dda31ac2284faed247618141e74a8ed67
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018962b3a9650000040300483046022100921e0445236030c7c6b72d46a91dbba769f2b406e9dd19efa228eb88146229a7022100916947c601f157e77e2b5f8f3eda3de9291e98bd1de40899105e7304a1a7ad5e007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018962b3a9b3000004030047304502205691a7e74e0a55cbaefd1f7e4c7247bbf091344a812eb3bc14b49db7e4b47b78022100e09215dd9eb59c5afeb2f8ff948c9d0b89cc455c7bf0785e12709ace0e969915007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018962b3a99200000403004630440220127ea78723f12576b99e26e320e27d80cc94240398f200f7fcb323f1a8a6fa84022011952d1c0e7217441f07f371d88ca2650b0333e2a24f11a4fcf8ca6be491da81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inclusivedesign.io.tudelft.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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