pluris2018.dec.uc.pt

- Universidade de Coimbra -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 04:04:e8:61:a3:3c:5f:5a:93:3f:46:93:07:e1:5e:22 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universidade de Coimbra

Organization: Universidade de Coimbra
Organization unit: Universidade de Coimbra
Locality: Coimbra
Country: PT

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 04:04:e8:61:a3:3c:5f:5a:93:3f:46:93:07:e1:5e:22
Serial Number (int): 5342394425252656318997692609690951202
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f1:a7:25:6d:8f:e7:e4:45:e8:16:15:ac:95:04:f3:62:c1:7e:8a:5d
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 28:87:91:64:bc:0e:da:e8:12:e5:bf:ba:81:e2:af:3b:99:69:ae:a6
Fingerprint (sha256): 06:81:a8:e9:b3:92:35:ca:af:07:65:c2:36:30:00:ad:24:44:9f:2b:2b:b1:b7:b5:11:f3:d8:63:32:f3:8c:15

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate pluris2018.dec.uc.pt

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pluris2018.dec.uc.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pluris2018.dec.uc.pt

Other certificates including the domain name uc.pt

(limited to 100 certificates)
erp.uc.pt
da.ci.uc.pt
labder.dei.uc.pt
cdv.dei.uc.pt
ai4eu.dei.uc.pt
isise.dec.uc.pt
nectar.eq.uc.pt
web.fcdef.uc.pt
dec.uc.pt
vgi.uc.pt
lists.dei.uc.pt
anossaidentidade.uc.pt
intra.fct.uc.pt
ftp.eq.uc.pt
vgi.uc.pt
daephys.fis.uc.pt
voluntarios.cibit.uc.pt
agriao.ci.uc.pt
wwac2016.dec.uc.pt
pihackathon.dei.uc.pt
zabbix.dec.uc.pt
pesquisa.auc.uc.pt
www.uc.pt
ebefree.uc.pt
radius.deec.uc.pt
loja.fe.uc.pt
spes.fd.uc.pt
www.eq.uc.pt
pluris2018.dec.uc.pt
ldod.uc.pt
isr2022.isr.uc.pt
accept.uc.pt
cmuc.mat.uc.pt
epqu2011.isr.uc.pt
clubeprogramacao.dec.uc.pt
git-ci.dei.uc.pt
onda.dei.uc.pt
arqmultimedia.cd25a.uc.pt
devasses.dei.uc.pt
acustica2017.uc.pt
mooshak.dei.uc.pt
bon.deec.uc.pt
fisica.uc.pt
best.uc.pt
cibb.uc.pt
spin.fis.uc.pt
git.dei.uc.pt
*.isr.uc.pt
cdv.dei.uc.pt
belenus-dev.uc.pt
*.ces.uc.pt
oracle.dei.uc.pt
estagios.dei.uc.pt
comunidade.esms.dei.uc.pt
sasuc.go.uc.pt
vhosts.cnc.uc.pt
lct-svn.dei.uc.pt
dms.ci.uc.pt
inforestudante.uc.pt
cameras.dec.uc.pt
snipeit.deec.uc.pt
moodle.fe.uc.pt
smtp.deec.uc.pt
net.fpce.uc.pt
isise.dec.uc.pt
icm.uc.pt
mooshak2.dei.uc.pt
idp.uc.pt
suporte.uc.pt
daephys.fis.uc.pt
offline.uc.pt
www.cisuc.uc.pt
quark.fis.uc.pt
zabbix.dec.uc.pt
linkresearch.dei.uc.pt
justsideatlas.uc.pt
helpdesk.fpce.uc.pt
Tyre4BuildIns.dec.uc.pt
ldod.uc.pt
intra.fd.uc.pt
radius.fcdef.uc.pt
www.tyre4BuildIns.dec.uc.pt
visteam.isr.uc.pt
www.eq.uc.pt
syn2psy.cnc.uc.pt
www.itecons.uc.pt
fs2.uc.pt
da.ci.uc.pt
clubeprogramacao.dec.uc.pt
git.deec.uc.pt
alpha.sib.uc.pt
falcon.mat.uc.pt
syn2psy.cnc.uc.pt
bee.fe.uc.pt
wotca16.mat.uc.pt
fisica.uc.pt
box.deec.uc.pt
visteam.isr.uc.pt
ftp.eq.uc.pt
admin.estagios.dei.uc.pt

Certificate

The complete raw certificate details for pluris2018.dec.uc.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwvDBthyKT9MkKhXnBzq
g7f2SlBu18uj8fylZIeECaMUoUWPxFuCQ11TgapPyxpCSKPG88RQ8Zs4a2pKOYWJ
CqwKpKKXMghPm3LBGa+qZEz89QZY0Rq8fR/v6iNmconxPth9fcfWpZa+7vRwF9vf
OtFGDRRy1MZjzVekNXLMe0ONSrE4YncpMYu8542Vn6eJq+PXw+XPYhdKyEukm66q
4JJOPnWQCGLcXx9rh7glVP41ITvQNDdLDCRLt3F32hE23KkM/8Qn2TR0DcZ1Vqqz
26cuuiIblqNyrrW/iiIUzftIaCPRXZSstaNjt7UcCFYDJI3lHJYucsefD27MPd1i
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5342394425252656318997692609690951202
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coimbra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universidade de Coimbra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universidade de Coimbra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pluris2018.dec.uc.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24622269439571169806276782772633859004307618971897801948504531984289627688524739238539207870772942459305663278857652033958389466720350422656696351778573171022329772354985510349697327797105502775599428822642824347758981220816439565579996447852138057934621440550283524307876861431873309840364681185068657213217037458201833326388198958376052475677446497529401059875455700600787627969690467795803280455921844330020888862338042821084501503514834701473751521367563705027295802961150454969411101247969085317152931730417575339376958089684612205333228049087458833077874869548792088342104152242872224978348145075151713085514351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1a7256d8fe7e445e81615ac9504f362c17e8a5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pluris2018.dec.uc.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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