acapulco.tue.nl

- Technische Universiteit Eindhoven -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number fc:37:48:77:27:c1:90:54:0f:61:37:aa:37:dd:87:5f was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Technische Universiteit Eindhoven

Organization: Technische Universiteit Eindhoven
State / Province: Noord-Brabant
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): fc:37:48:77:27:c1:90:54:0f:61:37:aa:37:dd:87:5f
Serial Number (int): 335252501038964937246681599041605568351
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 02:87:54:e4:dd:28:fd:fd:c6:9d:9e:f8:5b:b8:e3:53:64:3d:fc:0a
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 38:a7:18:fd:9f:2e:e6:e2:e1:20:b5:36:69:a0:3a:dd:34:55:7e:c2
Fingerprint (sha256): 06:70:b7:76:5b:dd:73:2f:dd:fc:e2:14:49:72:e4:1f:d2:1d:1e:32:3a:ea:33:92:83:fc:ac:27:cf:9a:4c:ba

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate acapulco.tue.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acapulco.tue.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acapulco.tue.nl

Other certificates including the domain name tue.nl

(limited to 100 certificates)
peach.win.tue.nl
cirrus.tue.nl
venus.tue.nl
ernsi2019.tue.nl
anankep.tue.nl
forms.carolinehummels.tue.nl
webmath.tue.nl
sites.win.tue.nl
plasimo.phys.tue.nl
cswennenhuis.win.tue.nl
sitb2020.win.tue.nl
jobs.tue.nl
alumni.simonstevin.tue.nl
compprog.win.tue.nl
groep-een.tue.nl
peach.win.tue.nl
vargas.icts.tue.nl
owas.test.tue.nl
owinfo.tue.nl
bep.win.tue.nl
articles.il.tue.nl
studyweb2.tue.nl
oocsi.id.tue.nl
trainingenonlinemedia.tue.nl
dialoog.tue.nl
kvaesen.ieis.tue.nl
nadine.icts.tue.nl
skills-assessment.tue.nl
peach.win.tue.nl
alumnionlineforms.tue.nl
delta-dev.win.tue.nl
webhost.gewis.nl
sites.im.tue.nl
peach.win.tue.nl
opennebula.tue.nl
calculuslecture.tue.nl
vandeburgt.tue.nl
pas.tue.nl
evo02.win.tue.nl
svn.win.tue.nl
rdmwiki.tue.nl
hrlink.tue.nl
seclab1.win.tue.nl
powertech2015-eindhoven.tue.nl
bep.win.tue.nl
forms.dies2015.tue.nl
alumnionlineforms.tue.nl
sites2010.iec.tue.nl
oslo.tue.nl
connecttest.tue.nl
carlos.win.tue.nl
groep-een.tue.nl
formulieren.cursor.tue.nl
platoolab.id.tue.nl
*.dianus.libr.tue.nl
dashboard.tue.nl
vpn2.tue.nl
peach.win.tue.nl
p-e.ieis.tue.nl
bnp9.win.tue.nl
sites.im.tue.nl
openepda.org
is.ieis.tue.nl
step-t.icts.tue.nl
autonomic-networks.ele.tue.nl
lyncmedpool01.campus.test.tue.nl
crowdfund.tue.nl
security1.win.tue.nl
forms.tuexperience.tue.nl
assignments.win.tue.nl
opac.ieis.tue.nl
accept-horafinita.tue.nl
sites.bwk.tue.nl
groep-een.com
technificent.nl
acapulco.tue.nl
industria.tue.nl
vandewouw.dc.tue.nl
incapsula.com
kerstwintercircus.tue.nl
innovationspace.tue.nl
landingont.step.tue.nl
tuwep.tue.nl
industria.tue.nl
peach.win.tue.nl
alumnionline.tue.nl
gale.win.tue.nl
pathways.tue.nl
ocmstest.tue.nl
faraday.ele.tue.nl
momentum.tue.nl
incapsula.com
w3.tue.nl
peach.win.tue.nl
vandewouw.dc.tue.nl
security.tue.nl
ooti-projects.win.tue.nl
autonomic-networks.ele.tue.nl
security.tue.nl
peach.win.tue.nl

Certificate

The complete raw certificate details for acapulco.tue.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3O3ARhOBU08AvvVCy4+z
pwodTO9MLH5CbOkQaRSeGqLKe2/CvQw2SFuQnm1pCebHV4qLXVbACQh/37BrFlEg
RmL3MKOpUg97Jn+aFi9vnLnAggybCJke00W2APMswjbZC+D8u9Jxx6OKxpQgjX1O
jHXeMsyDc0rstjzD4HhL08eRlgYBqFksxq20JRWzPJ4xsT1Ifv1ZCGura+ru965o
eCbeIU87lyweAI/NyH5QgT+6uuKYdRLRP/7fm1sqj/Y5FKgMeNu8szijt883wNrX
LbXwDFqtaOF+sJMjPEkdpr+6xQLB6/UmqK3dK50x4FVCn10FK9YLlcR9Xjq/nE7J
yJRPYX6rkIbNqT868bXGhG5rlTHkJhbjwU807Idmba1niD9QgtutPcjwM/28HYye
DSqk8hn2bg3IJghQDQOTXjAAPaSAFZShpJR8+HJxoS0VcFOIhat0ez/1XfedYfjS
xfQHD1WkdVKXCnP6F52Ba5WWGbozkaHr2B90wYe8RN6bywSPuEA5c2gtgvM6y7Xz
RCyuOv/UV0IOq3c4A8JfWYrsxanYJAetW2VTiAyBS+Xqh7tkjaCfwbuEfHigQYn4
iAOc2nGdsLuOHgwkJXifzpkSVC+34cW+1RlYlzdzPVn0AlreXJtYZQ8LPFXHxhgl
mFXnCzXemNMIaV01xFkVLIkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335252501038964937246681599041605568351
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Brabant'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technische Universiteit Eindhoven'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acapulco.tue.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 901310522071634013120983501263404666492781259841551266149520668618325548624629250123511227301713875754616717650086216613877221176495791115600208385112624289934736848851243407735377848102800951197231754289504252155378479266951484329284408633740047049315067359237217085253297432425258154674930926283319332561834624521672364333220546320787444536654809991756957601240835256838084470371290565926748436050423705633184573054583848869076546494429581385712079804116583141856979521137014490307837561411044685520083894383113802232784209169466517627665088824883334832463300822545617361563199467674498908414783370703666315445302749264621387406751877216243520394696966785008854969653846995092439480123000143338718465495564719431118268309609880597347906848567565300723794972025885000330630237939976714765601092689207183899748417019794045380167164371009507470957645262208942448907355309506715580737230893666730407834779896061108641701241999777163185104507503008365359628254934740541068066787536376495561697195610931948478361691694483590597888186200005872569640784921787198004809162761235080267555050161899000856883062321175609765070661933430490952414370593888727729780504087122346248362305038166853665435838882160583090927419686822691447760783486089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							028754e4dd28fdfdc69d9ef85bb8e353643dfc0a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acapulco.tue.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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