webmail.univ-lyon3.fr

- Université Lyon 3 Jean Moulin -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 90:98:21:42:0b:ac:64:c8:b4:08:73:74:f2:72:c0 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Université Lyon 3 Jean Moulin

Organization: Université Lyon 3 Jean Moulin
State / Province: Auvergne-Rhône-Alpes
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 90:98:21:42:0b:ac:64:c8:b4:08:73:74:f2:72:c0
Serial Number (int): 750776308858256141532162042612576960
Serial Number lenght: 120 bits, 15 octets

SubjectKeyId: ea:17:de:e3:4a:fc:26:4d:37:d9:5f:96:c9:5b:de:20:0c:59:6d:28
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 16:64:05:91:a0:65:8b:ad:37:c1:b3:d4:32:8a:24:e4:7e:5b:5c:6b
Fingerprint (sha256): 06:85:04:77:25:e8:c8:12:84:38:d8:c6:6a:79:c0:2d:f4:c1:d9:bf:43:b5:82:72:47:25:83:e2:39:78:57:fc

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate webmail.univ-lyon3.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.univ-lyon3.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.univ-lyon3.fr
www.webmail.univ-lyon3.fr

Other certificates including the domain name univ-lyon3.fr

(limited to 100 certificates)
sfbconf.univ-lyon3.fr
portail-vacataires-ens-consult.univ-lyon3.fr
vsp-quai-chev.univ-lyon3.fr
nextcloud-preprod.univ-lyon3.fr
parefeu-master-ipmi.univ-lyon3.fr
sondage.univ-lyon3.fr
evenements.univ-lyon3.fr
webtv.univ-lyon3.fr
web2.univ-lyon3.fr
webmail.univ-lyon3.fr
mail.univ-lyon3.fr
haproxy-pp.univ-lyon3.fr
webinscription.univ-lyon3.fr
ged.univ-lyon3.fr
psc.univ-lyon3.fr
superview.univ-lyon3.fr
pop.univ-lyon3.fr
vsp-manu-b4-haut.univ-lyon3.fr
webscolarite.univ-lyon3.fr
vsp-manu-b4-haut.univ-lyon3.fr
impression.univ-lyon3.fr
mahara.univ-lyon3.fr
webmail.univ-lyon3.fr
vdi.univ-lyon3.fr
fdv-srv.univ-lyon3.fr
llm.univ-lyon3.fr
netmanager.univ-lyon3.fr
esrs.univ-lyon3.fr
iaedt.univ-lyon3.fr
applications.univ-lyon3.fr
vsp-quai-chev.univ-lyon3.fr
adfs.ad.univ-lyon3.fr
ecandidat.univ-lyon3.fr
adfs.ad.univ-lyon3.fr
web2.univ-lyon3.fr
revues.univ-lyon3.fr
kanboard.univ-lyon3.fr
hra-for.univ-lyon3.fr
mahara.univ-lyon3.fr
applications.univ-lyon3.fr
boutique.univ-lyon3.fr
catalogue.univ-lyon3.fr
vsp-manu-b6-bas.univ-lyon3.fr
www.univ-lyon3.fr
idptest.univ-lyon3.fr
css03.univ-lyon3.fr
eduspot2.univ-lyon3.fr
autodiscover.univ-lyon3.fr
impression-pers.univ-lyon3.fr
choisirsonsport.univ-lyon3.fr
idp.univ-lyon3.fr
vsp-manu-b6-haut.univ-lyon3.fr
ligeo-gestion.univ-lyon3.fr
webelection.univ-lyon3.fr
esrs.univ-lyon3.fr
candidat-ens-chercheur.univ-lyon3.fr
oa.univ-lyon3.fr
webmail.univ-lyon3.fr
cervoprint2.univ-lyon3.fr
questionrep.univ-lyon3.fr
veeam.ad.univ-lyon3.fr
webtv.univ-lyon3.fr
cas.univ-lyon3.fr
moodle.univ-lyon3.fr
prel.univ-lyon3.fr
applications.univ-lyon3.fr
glpi.univ-lyon3.fr
impression.univ-lyon3.fr
imptest-pers.univ-lyon3.fr
owncloud.univ-lyon3.fr
survey.univ-lyon3.fr
piwik.univ-lyon3.fr
piwik.univ-lyon3.fr
vsp-quai-huvelin.univ-lyon3.fr
boutique.univ-lyon3.fr
atelier-artistique.univ-lyon3.fr
indicateurs-preprod.univ-lyon3.fr
cervoprint.univ-lyon3.fr
docker-registry.univ-lyon3.fr
acces-distant.univ-lyon3.fr
eas.univ-lyon3.fr
cadeaunoel.univ-lyon3.fr
idp.univ-lyon3.fr
moodle.univ-lyon3.fr
moodle.univ-lyon3.fr
imap.univ-lyon3.fr
bo.univ-lyon3.fr
impression-adm-ens.univ-lyon3.fr
edseg.univ-lyon3.fr
ezscd.univ-lyon3.fr
webmail.univ-lyon3.fr
scd-resnum.univ-lyon3.fr
clic.univ-lyon3.fr
imap.univ-lyon3.fr
mediatheque.univ-lyon3.fr
cervoprint2.univ-lyon3.fr
pop.univ-lyon3.fr
parefeu.univ-lyon3.fr
cerebro.univ-lyon3.fr
gitlab.univ-lyon3.fr

Certificate

The complete raw certificate details for webmail.univ-lyon3.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 750776308858256141532162042612576960
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auvergne-Rhône-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Université Lyon 3 Jean Moulin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.univ-lyon3.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 770465161137619422893992050198402187790340941717971504967069974291084001661151506539974597647661878540913422652772921426695841958234063350888694760827925809539293555713938735705752085098130526934819028029064068883677356234314416975530023246908752773713844480968365017709524497928577287485050836183700253490063094499738504359053491259065663477388199842571261671669023968311703078543826086289349888267580307870019867527806981843568587301638670051455189652612876127393318840169910181223389066750794656487184516257155278665443775951683140940402310049269729652779810667811750414497703361435245270086569817382248402405102725538387778497975843406756501765948246152706428693901650386698773071381598772009714128380465178012366172686893685398431582196849962895683169851879046633054424333080898252505843415668032863793202704811076802286706385122663570431460173237267634154077647466158596357380788538630773748067715232882236074167905721136723255579399951925635316790751623064794521542328597307027089430310904289217201802278557475025555716501375330102454422856927672039001686459822782299560871432588868840539242441585505977154993738088599740302525129433636688632468043355139209361351502199773081327912871801148665623756985600237499765032989407083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea17dee34afc264d37d95f96c95bde200c596d28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.univ-lyon3.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webmail.univ-lyon3.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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