research.tudelft.nl

- Technische Universiteit Delft -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 9b:92:0a:3b:5e:d7:63:73:f6:db:7f:b7:f6:b2:99:d9 was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Technische Universiteit Delft

Organization: Technische Universiteit Delft
State / Province: Zuid-Holland
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 9b:92:0a:3b:5e:d7:63:73:f6:db:7f:b7:f6:b2:99:d9
Serial Number (int): 206788622215917649620024610184615860697
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 1d:3f:d0:9e:f6:da:bf:4d:36:9e:8d:e8:db:b8:4d:72:71:bf:cc:d8
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): cb:e3:18:d3:66:87:bb:b5:d2:1c:72:b1:47:cd:24:15:1e:5f:d5:ba
Fingerprint (sha256): 06:6e:d9:9c:22:10:59:4a:65:b6:c9:fe:e5:1d:7a:3d:62:99:99:61:f9:0c:f4:36:42:37:53:53:28:f0:57:1f

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate research.tudelft.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for research.tudelft.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

research.tudelft.nl

Other certificates including the domain name tudelft.nl

(limited to 100 certificates)
solidstate.quantumtinkerer.tudelft.nl
api.p-cube.gamelab-staging.tbm.tudelft.nl
bepsys.ewi.tudelft.nl
webdsl-org.ewi.tudelft.nl
talentservices.tudelft.nl
wism8.dunet.tudelft.nl
www.pp1.tudelft.nl
suslabnwe-en.io.tudelft.nl
eipdev.ewi.tudelft.nl
quantumtinkerer.tudelft.nl
www.hooke.tudelft.nl
mattermost-imphys.tudelft.nl
3d.bk.tudelft.nl
hpcwiki.tudelft.nl
suslabnwe-de.io.tudelft.nl
externenmds.tudelft.nl
webdsl-2015.ewi.tudelft.nl
telefoonboek.tudelft.nl
searchenginewis2.ewi.tudelft.nl
se.ewi.tudelft.nl
ipms-prd1.tudelft.nl
bitrix24.tbm.tudelft.nl
punch.tudelft.nl
oauth-t.tudelft.nl
inforln.tudelft.nl
3d.bk.tudelft.nl
bktoi1.bk.tudelft.nl
abdowiki.tudelft.nl
www.broach.nl
webapp.tudelft.nl
demoprojects.tudelft.nl
telewerken.tudelft.nl
pl-jenkins.ewi.tudelft.nl
bbtest.tudelft.nl
marsrv.tudelft.nl
4tudata-libbuild.tudelft.nl
inforln.tudelft.nl
mod-est.tbm.tudelft.nl
coin2013-prima.tudelft.nl
syllabus.tudelft.nl
aecoderunner.lr.tudelft.nl
erfgoed.tudelft.nl
www.civielebedrijvendagen.nl
was.tudelft.nl
sysadminwiki.tudelft.nl
esb-gateway.tudelft.nl
www.vvtp.tudelft.nl
services.sc.tudelft.nl
3d.bk.tudelft.nl
campusdevelopment.tudelft.nl
marsrv.tudelft.nl
svn.3me.tudelft.nl
lamp6.tudelft.nl
svn.tnw.tudelft.nl
www.dined.nl
dutmail.tudelft.nl
b2bcrm.tudelft.nl
www.nas.ewi.tudelft.nl
b2bcrm.tudelft.nl
qutech.tudelft.nl
personeelsdossiers.tudelft.nl
zandmotor-libtest.tudelft.nl
www.beeldportal.tudelft.nl
labservant.tudelft.nl
lampict2.tudelft.nl
coursemaptest.tudelft.nl
se.ewi.tudelft.nl
presto.tudelft.nl
3d.bk.tudelft.nl
www.punch.tudelft.nl
reservation.ekl.tudelft.nl
qit.ewi.tudelft.nl
elearning-libprod.tudelft.nl
www.praktischestudie.nl
handler.tudelft.nl
matchmakers.ewi.tudelft.nl
newmediacentre.tudelft.nl
burgerbegroting.tbm.tudelft.nl
www.broach.nl
ismir2019.ewi.tudelft.nl
sg-4.tbm.tudelft.nl
srv775-2.tudelft.net
www.dcsc.tudelft.nl
ppm1.tudelft.nl
lts1-test.tbm.tudelft.nl
inclusivedesign.io.tudelft.nl
visit.tudelft.nl
eurasipdev.ewi.tudelft.nl
ei.tudelft.nl
elearning-libaccp.tudelft.nl
www.practischestudie.nl
api.myota-test.tudelft.nl
svn.bk.tudelft.nl
gnss1.tudelft.nl
luistermutant.gamelab.tbm.tudelft.nl
filr.tudelft.nl
trendhost-cb.tudelft.nl
www.punch.tudelft.nl
research.tudelft.nl
osidoc.tudelft.nl

Certificate

The complete raw certificate details for research.tudelft.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 206788622215917649620024610184615860697
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technische Universiteit Delft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'research.tudelft.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756475419349789397036401986946491943104105656176102058499523672703567581046153758348580733105721919044414255452297264844713104771342695848000582777938768518653044610328734040556548395224591812999580984514847687702236612318543742479087245284212471938933848179837507198118095340019715600068706682434203488627281014725351881712606279063353363776741153762147143656185621952453666148909137916118995720289240624543783347712581109041463688461311836966691956279419495040600966861292599491203040928973877238175273394369898276353631497168205466966378967630794931385020177127437550418329377153968572761411893060832745269961841943397480204351614000868042064142098331768689373282928451663656791584540188544203580484717688652303902008760090442631322716932520244234256979006741525258317761098929091416399499480347319227654127010277226578803327217971657466436697663861646940991811681057773338353061192681325361270097323634517394350451790919302800152524743381820054314762930949060517567496350126088363725382757986535371382434344893833823662052570563996638943037031769609674435805031859521568004053656586027473184339595414406250934943495523080679288551452019611527317904059617963743167276596477733282151050427384010094938995185290441359799797410950577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d3fd09ef6dabf4d369e8de8dbb84d7271bfccd8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.tudelft.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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