homedir.katho.be

- Katholieke Hogeschool Zuidwest-Vlaanderen -

Issued by TERENA SSL CA

About this certificate

This digital certificate with serial number 18:42:60:f4:c1:3a:c1:31:d6:4f:d7:56:0f:77:04 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Katholieke Hogeschool Zuidwest-Vlaanderen

Organization: Katholieke Hogeschool Zuidwest-Vlaanderen
Organization unit: KATHO IT
Country: BE

TERENA

Organization: TERENA
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 18:42:60:f4:c1:3a:c1:31:d6:4f:d7:56:0f:77:04
Serial Number (int): 125961445290220783371699814791083780
Serial Number lenght: 117 bits, 15 octets

SubjectKeyId: af:f9:c2:f1:29:e9:7f:94:9f:86:c2:34:96:cb:3c:d7:53:60:98:a1
AuthorityKeyId: 0c:bd:93:68:0c:f3:de:ab:a3:49:6b:2b:37:57:47:ea:90:e3:b9:ed

Fingerprint (sha1): a1:65:81:93:a8:60:62:79:f6:bc:f5:d8:b4:09:68:39:d2:71:d8:26
Fingerprint (sha256): 05:9d:71:0f:e1:47:5d:1a:fb:89:fb:21:46:3f:db:41:62:a0:be:07:e7:79:d4:b2:d9:c0:15:4a:71:37:7f:e6

Issuing Certificate URL: http://crt.tcs.terena.org/TERENASSLCA.crt

Revocation information

OCSP Server: http://ocsp.tcs.terena.org
CRL Distribution Point: http://crl.tcs.terena.org/TERENASSLCA.crl

Check the revocation status for certificate homedir.katho.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for homedir.katho.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

homedir.katho.be
ftp.katho.be

Other certificates including the domain name katho.be

(limited to 100 certificates)
multicopter.katho.be
multicopter.katho.be
sdza.katho.be
kathonet.katho.be
multicopter.katho.be
katho.be
sdza.katho.be
sdza.katho.be
fsweb.katho.be
multicopter.katho.be
homedir.katho.be
multicopter.katho.be
sdza.katho.be
multicopter.katho.be
sdza.katho.be
multicopter.katho.be
multicopter.katho.be
multicopter.katho.be
multicopter.katho.be
multicopter.katho.be
sdza.katho.be
sdza.katho.be
sdza.katho.be
kathonet.katho.be
multicopter.katho.be
sdza.katho.be
sdza.katho.be
multicopter.katho.be
app.vives.be
multicopter.katho.be
multicopter.katho.be
sdza.katho.be
multicopter.katho.be
sdza.katho.be
www1.katho.be
multicopter.katho.be
multicopter.katho.be
sdza.katho.be
sdza.katho.be
multicopter.katho.be
sdza.katho.be
multicopter.katho.be
sdza.katho.be
sdza.katho.be
multicopter.katho.be
sdza.katho.be
sdza.katho.be
multicopter.katho.be
multicopter.katho.be
sdza.katho.be
sdza.katho.be
sdza.katho.be
sdza.katho.be
multicopter.katho.be
sdza.katho.be
sdza.katho.be
sdza.katho.be
multicopter.katho.be
multicopter.katho.be
multicopter.katho.be
multicopter.katho.be
multicopter.katho.be
multicopter.katho.be
sdza.katho.be
sdza.katho.be
multicopter.katho.be
sdza.katho.be
multicopter.katho.be
mail.vives.be
sdza.katho.be
eva.katho.be
sdza.katho.be
sdza.katho.be
sdza.katho.be
multicopter.katho.be
multicopter.katho.be
sdza.katho.be
sdza.katho.be
multicopter.katho.be
sdza.katho.be
multicopter.katho.be
katho.be
sdza.katho.be
sdza.katho.be
multicopter.katho.be
multicopter.katho.be
sdza.katho.be
sdza.katho.be
sdza.katho.be
multicopter.katho.be
sdza.katho.be
sdza.katho.be
sdza.katho.be
multicopter.katho.be
multicopter.katho.be
sdza.katho.be
sdza.katho.be
rp0100.katho.be
multicopter.katho.be
remote.vives.be

Certificate

The complete raw certificate details for homedir.katho.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEoTCCA4mgAwIBAgIPGEJg9ME6wTHWT9dWD3cEMA0GCSqGSIb3DQEBBQUAMDYx
CzAJBgNVBAYTAk5MMQ8wDQYDVQQKEwZURVJFTkExFjAUBgNVBAMTDVRFUkVOQSBT
U0wgQ0EwHhcNMTAxMDAyMDAwMDAwWhcNMTMxMDAxMjM1OTU5WjBvMQswCQYDVQQG
EwJCRTEyMDAGA1UEChMpS2F0aG9saWVrZSBIb2dlc2Nob29sIFp1aWR3ZXN0LVZs
YWFuZGVyZW4xETAPBgNVBAsTCEtBVEhPIElUMRkwFwYDVQQDExBob21lZGlyLmth
dGhvLmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pp8QvKm7m71
a/gde1RvKpSqBbpG2/UNn6mIv7Pg2elKblKz+dDocVmsQnPWxmJ2c2ChlJ51fInY
1jvBeNVudoOB5JgXpGF5Y1ohkPo0G0w8mvNI1/gJo4JJaltCBMOv2nKKtgulikfd
XG7kQ+AGw1Mnls+yr2XNwTc7nwQpzUP8sehb1hthzMleYcdqEvA+b82lUNhkeugR
nvRJubHe/W6wL8MrFqx3dNuvzkDD4YXRnefcYm5BErxvW5DXMD3zcX3k2GBwdGmD
ixIDxSeW2u6xcK6MKvIo59kXYTAgNjN8c4KFdUCJT/GYnjnUhU00+6g7krPDEuQ1
GWUtBSiCPwIDAQABo4IBcTCCAW0wHwYDVR0jBBgwFoAUDL2TaAzz3qujSWsrN1dH
6pDjue0wHQYDVR0OBBYEFK/5wvEp6X+Un4bCNJbLPNdTYJihMA4GA1UdDwEB/wQE
AwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAYBgNVHSAEETAPMA0GCysGAQQBsjEBAgIdMDoGA1UdHwQzMDEwL6AtoCuGKWh0
dHA6Ly9jcmwudGNzLnRlcmVuYS5vcmcvVEVSRU5BU1NMQ0EuY3JsMG0GCCsGAQUF
BwEBBGEwXzA1BggrBgEFBQcwAoYpaHR0cDovL2NydC50Y3MudGVyZW5hLm9yZy9U
RVJFTkFTU0xDQS5jcnQwJgYIKwYBBQUHMAGGGmh0dHA6Ly9vY3NwLnRjcy50ZXJl
bmEub3JnMCkGA1UdEQQiMCCCEGhvbWVkaXIua2F0aG8uYmWCDGZ0cC5rYXRoby5i
ZTANBgkqhkiG9w0BAQUFAAOCAQEAlaE5NvAqGZxq5Phz4XQXrtzhCc7RMVLFD4Er
dX6XT+uYqFHLjJpzcts1JN7zzTF4S6PhVw0tUlkv0CX1Hg8pxJlPTM6v4hqXuGbo
/nbHyqmBum8UkcxubuhbuXwc4upFgOXT4kPmPBIY7yWLJXv9mcz2lHFcauMELB0p
MxUL/CkLrD5DSNnHM68JFtENL21LLzNMB55aRiADhbRstK1F1I1vvSggVzSNeo7l
dL6nIESv8u6RvrncV6dFsw7n5prDsaI9Cw6kYs3EfrmfDhYrY5M+08ScAKAzlG30
4yocYBkiHP93/Tbw41ZB88QGINsuGXDruGBOTp76bgwFZx76/w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pp8QvKm7m71a/gde1Rv
KpSqBbpG2/UNn6mIv7Pg2elKblKz+dDocVmsQnPWxmJ2c2ChlJ51fInY1jvBeNVu
doOB5JgXpGF5Y1ohkPo0G0w8mvNI1/gJo4JJaltCBMOv2nKKtgulikfdXG7kQ+AG
w1Mnls+yr2XNwTc7nwQpzUP8sehb1hthzMleYcdqEvA+b82lUNhkeugRnvRJubHe
/W6wL8MrFqx3dNuvzkDD4YXRnefcYm5BErxvW5DXMD3zcX3k2GBwdGmDixIDxSeW
2u6xcK6MKvIo59kXYTAgNjN8c4KFdUCJT/GYnjnUhU00+6g7krPDEuQ1GWUtBSiC
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 125961445290220783371699814791083780
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-10-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Katholieke Hogeschool Zuidwest-Vlaanderen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KATHO IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'homedir.katho.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28606036510616872375155384771278680810270913802744925271635985707585554898115511341354369144860919284882451177855927184521598299148551918446877940300464088741987588985971277977506229334080494597451539777923679599536304977821327296407278342428340682447917296470845609643944319522362838779815083446278570293469229314637358317978347000279198547928629223106684662557527081953520226608855296624469042253578423334342403031295976908393223869183506925858032180672886917292763581340645359207241305885150572855839688826145532369818016083616851668999583254089043417958276595101534528943257414875656278483095890791810956964430399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cbd93680cf3deaba3496b2b375747ea90e3b9ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aff9c2f129e97f949f86c23496cb3cd7536098a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.tcs.terena.org/TERENASSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.tcs.terena.org/TERENASSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tcs.terena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homedir.katho.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.katho.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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