gnss1.tudelft.nl

- Technische Universiteit Delft -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number ed:f9:aa:42:5e:2c:e5:b7:d5:c5:33:2e:5f:d2:a2:ff was issued on by GEANT Vereniging.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Technische Universiteit Delft

Organization: Technische Universiteit Delft
State / Province: Zuid-Holland
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): ed:f9:aa:42:5e:2c:e5:b7:d5:c5:33:2e:5f:d2:a2:ff
Serial Number (int): 316323370186637449155476716235214988031
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 92:38:55:8e:a7:95:bf:fc:7c:05:c7:5a:55:02:ca:97:67:82:09:61
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 82:60:06:61:09:24:88:31:cb:b5:3d:88:0f:ff:1c:a0:26:34:92:d2
Fingerprint (sha256): 06:2f:41:8b:fe:91:b8:1c:f7:67:42:9f:5b:f4:6e:46:0a:4f:5a:9f:a7:f5:9a:fa:03:6c:a1:17:db:cd:b6:0b

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate gnss1.tudelft.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gnss1.tudelft.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gnss1.tudelft.nl

Other certificates including the domain name tudelft.nl

(limited to 100 certificates)
solidstate.quantumtinkerer.tudelft.nl
api.p-cube.gamelab-staging.tbm.tudelft.nl
bepsys.ewi.tudelft.nl
webdsl-org.ewi.tudelft.nl
talentservices.tudelft.nl
wism8.dunet.tudelft.nl
www.pp1.tudelft.nl
suslabnwe-en.io.tudelft.nl
eipdev.ewi.tudelft.nl
quantumtinkerer.tudelft.nl
www.hooke.tudelft.nl
mattermost-imphys.tudelft.nl
3d.bk.tudelft.nl
hpcwiki.tudelft.nl
suslabnwe-de.io.tudelft.nl
externenmds.tudelft.nl
webdsl-2015.ewi.tudelft.nl
telefoonboek.tudelft.nl
searchenginewis2.ewi.tudelft.nl
se.ewi.tudelft.nl
ipms-prd1.tudelft.nl
bitrix24.tbm.tudelft.nl
punch.tudelft.nl
oauth-t.tudelft.nl
inforln.tudelft.nl
3d.bk.tudelft.nl
bktoi1.bk.tudelft.nl
abdowiki.tudelft.nl
www.broach.nl
webapp.tudelft.nl
demoprojects.tudelft.nl
telewerken.tudelft.nl
pl-jenkins.ewi.tudelft.nl
bbtest.tudelft.nl
marsrv.tudelft.nl
4tudata-libbuild.tudelft.nl
inforln.tudelft.nl
mod-est.tbm.tudelft.nl
coin2013-prima.tudelft.nl
syllabus.tudelft.nl
aecoderunner.lr.tudelft.nl
erfgoed.tudelft.nl
www.civielebedrijvendagen.nl
was.tudelft.nl
sysadminwiki.tudelft.nl
esb-gateway.tudelft.nl
www.vvtp.tudelft.nl
services.sc.tudelft.nl
3d.bk.tudelft.nl
campusdevelopment.tudelft.nl
marsrv.tudelft.nl
svn.3me.tudelft.nl
lamp6.tudelft.nl
svn.tnw.tudelft.nl
www.dined.nl
dutmail.tudelft.nl
b2bcrm.tudelft.nl
www.nas.ewi.tudelft.nl
b2bcrm.tudelft.nl
qutech.tudelft.nl
personeelsdossiers.tudelft.nl
zandmotor-libtest.tudelft.nl
www.beeldportal.tudelft.nl
labservant.tudelft.nl
lampict2.tudelft.nl
coursemaptest.tudelft.nl
se.ewi.tudelft.nl
presto.tudelft.nl
3d.bk.tudelft.nl
www.punch.tudelft.nl
reservation.ekl.tudelft.nl
qit.ewi.tudelft.nl
elearning-libprod.tudelft.nl
www.praktischestudie.nl
handler.tudelft.nl
matchmakers.ewi.tudelft.nl
newmediacentre.tudelft.nl
burgerbegroting.tbm.tudelft.nl
www.broach.nl
ismir2019.ewi.tudelft.nl
sg-4.tbm.tudelft.nl
srv775-2.tudelft.net
www.dcsc.tudelft.nl
ppm1.tudelft.nl
lts1-test.tbm.tudelft.nl
inclusivedesign.io.tudelft.nl
visit.tudelft.nl
eurasipdev.ewi.tudelft.nl
ei.tudelft.nl
elearning-libaccp.tudelft.nl
www.practischestudie.nl
api.myota-test.tudelft.nl
svn.bk.tudelft.nl
gnss1.tudelft.nl
luistermutant.gamelab.tbm.tudelft.nl
filr.tudelft.nl
trendhost-cb.tudelft.nl
www.punch.tudelft.nl
research.tudelft.nl
osidoc.tudelft.nl

Certificate

The complete raw certificate details for gnss1.tudelft.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316323370186637449155476716235214988031
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technische Universiteit Delft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gnss1.tudelft.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814762269988287515797808464724921055462327715225859079566429745497426640114995281803348765967333786035380463224570321591560729308332187581944916137670547112641930271078017173028191318352925642983171586717434360890510236253609630758867657953236073820440820287427749803671360153771987944563558419197622307433361943720693217104502054415466472859985018513689414566490269935138633152905380407111614015487875454271579040356137368952646401078364754275577822495845793683146899460130217443509772073858431781956210562927381808430239195143409906264294492641711404580898443166102160297151969066719085198005728582992781446527927722418586092352111373579154792283682272562253195472853640482556769925338771651473342425595293421036901522997682926292028599200990910421612261054502763167760674713681860824070579936801084924109161158072671334367786273751451197378807596515611882505029370559989741002884997434406764308936934071151155531272299300037497469099059569147080952935015684153562971662849110586779826605679833143147421300590260105357820860531103186432371548445930554117219277475127298258499141204850079562872206934767861101749382331434623258603847226658095217227296201496386027220793632762144374300218854562151859123867413673686279703771987447901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9238558ea795bffc7c05c75a5502ca9767820961
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gnss1.tudelft.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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