p-issc-007122.vuw.leidenuniv.nl

- Universiteit Leiden -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 57:b4:90:e2:a5:bf:63:22:0f:0f:6e:97:a5:ee:37:01 was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universiteit Leiden

Organization: Universiteit Leiden
State / Province: Zuid-Holland
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 57:b4:90:e2:a5:bf:63:22:0f:0f:6e:97:a5:ee:37:01
Serial Number (int): 116580387691668003574672688874548770561
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: e8:61:41:66:40:14:7d:c0:65:da:28:27:8d:bf:d4:3f:2f:c6:12:01
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): b3:83:7a:b4:77:a3:ed:6f:1d:13:2f:b0:4f:94:e1:67:39:c8:b9:d1
Fingerprint (sha256): 07:9a:4c:a0:8c:8b:34:3d:63:31:26:d1:33:e3:c3:29:4d:a0:ad:ad:9d:b1:fd:4b:bd:12:2f:5e:67:26:a5:e6

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate p-issc-007122.vuw.leidenuniv.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for p-issc-007122.vuw.leidenuniv.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

p-issc-007122.vuw.leidenuniv.nl

Other certificates including the domain name leidenuniv.nl

(limited to 100 certificates)
web2print.leidenuniv.nl
nmr.leidenuniv.nl
marishead.lorentz.leidenuniv.nl
leidenlawblog.nl
scharrelaar-p1.leidenuniv.nl
cas.physics.leidenuniv.nl
ppsn2020.liacs.leidenuniv.nl
datamining.liacs.leidenuniv.nl
issc.leidenuniv.nl
tornado-p-https.web.leidenuniv.nl
lucris.leidenuniv.nl
celspin-p.issc.leidenuniv.nl
foreman-develop.infra.leidenuniv.nl
leidenuniv.nl
SALMS01.leidenuniv.nl
director1-dev.srvtest.leidenuniv.nl
icga.leidenuniv.nl
uaccess.leidenuniv.nl
jira.issc.leidenuniv.nl
prosobab.leidenuniv.nl
scriptiebeoordeling-hum.leidenuniv.nl
www.math.leidenuniv.nl
Planon-BenO-t.leidenuniv.nl
login.uaccess.leidenuniv.nl
vrops-cluster.luci.leidenuniv.nl
issc.leidenuniv.nl
noah.backup.leidenuniv.nl
u-ldap-dev.srvtest.leidenuniv.nl
p-luci-001131.infra.leidenuniv.nl
zweepspin-p.issc.leidenuniv.nl
socrates.leidenuniv.nl
uaccess.leidenuniv.nl
tornado-a-https.web.leidenuniv.nl
leidenuniv.nl
lacdrvirtuallab-qa.leidenuniv.nl
sapgax.issc.leidenuniv.nl
vg5.strw.leidenuniv.nl
marishead.lorentz.leidenuniv.nl
avior.math.leidenuniv.nl
blackboardstaging.leidenuniv.nl
weblectures-a.leidenuniv.nl
usis.leidenuniv.nl
strwmail.strw.leidenuniv.nl
sapeca.leidenuniv.nl
phdcareerplatform.universiteitleiden.nl
u-tools.srvtest.leidenuniv.nl
aristotle.leidenuniv.nl
sapsra.leidenuniv.nl
www.strw.leidenuniv.nl
jss.leidenuniv.nl
mail.physics.leidenuniv.nl
mysite.leidenuniv.nl
kwartel-a.leidenuniv.nl
p-issc-007122.vuw.leidenuniv.nl
splbs02.vuw.leidenuniv.nl
huisstijl.leidenuniv.nl
form.services.universiteitleiden.nl
wagner-p.leidenuniv.nl
pontus.lorentz.leidenuniv.nl
leidenarthistoryblog.nl
smtp.leidenuniv.nl
studiegids-p.leidenuniv.nl
ooievaar.web.leidenuniv.nl
spapp30.vuw.leidenuniv.nl
saufb01.vuw.leidenuniv.nl
schildspin-dev.issc.leidenuniv.nl
lms-wyn-disp03.issc.leidenuniv.nl
raf-qa.law.leidenuniv.nl
lists.leidenuniv.nl
zweepspin-p.issc.leidenuniv.nl
webdav.leidenuniv.nl
scharrelaar-p3.leidenuniv.nl
helpdesk.universiteitleiden.nl
libcblog.nl
phdtrack-a.leidenuniv.nl
teams.leidenuniv.nl
evasys.leidenuniv.nl
x-ldap.leidenuniv.nl
cups.issc.leidenuniv.nl
uaccess.leidenuniv.nl
europeanbordercommunities.eu
webprojects.strw.leidenuniv.nl
science.leidenuniv.nl
vg5.strw.leidenuniv.nl
*.weblog.leidenuniv.nl
strwmgmt.strw.leidenuniv.nl
cms-a.universiteitleiden.nl
splic09.ilo.leidenuniv.nl
*.weblog.leidenuniv.nl
pinkashaw-o4.iam-ota.leidenuniv.nl
bankiva.leidenuniv.nl
rds-a.campus.leidenuniv.nl
phdtrack.leidenuniv.nl
planon-a.universiteitleiden.nl
jack-qa.web.leidenuniv.nl
web2print-t.leidenuniv.nl
grasparkiet.leidenuniv.nl
filosofie.leidenuniv.nl
jenkins.issc.leidenuniv.nl
www.readeronline.leidenuniv.nl

Certificate

The complete raw certificate details for p-issc-007122.vuw.leidenuniv.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 116580387691668003574672688874548770561
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universiteit Leiden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'p-issc-007122.vuw.leidenuniv.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 949169026279494703232846543089463427461732721612140116101178637847791009583138073005066933183130152470147372168744323588266176096826355633863791564828658259640979575377894480038062836184344099995185719941338729485914675985588101536382393146403489776757463583992798684222513011240834376645132984011888892490466084480470504189427982630356039026956604526987571519183243273718871699423709880792333271154460388220655412002788090487092110440949908477940113138223375281830202764800863119434957329812473961852349286027991662055697258675860438087725994182499193097625522673361474252816892563390629054063644146800250889512358933093815792662878501940040362366156310970049935998899022641117598918913680058831931689826801204331907363421695744812633429900747651970900701836141694669324987909563149969742963973925157748108557012164927404340287953256240835757475931905240372278720882023813503336594896657106639200210590292861145574084227267443441520790028267702777320434221917007994753899435689036496222058706945649407560132016354930028928688768231745216939769041000242287794955101852338592200522974712452305347608110813205751971848587487239072110335011731184776297845761674490277280225849272601326763676432126380893002000388494581286252910295085307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e861416640147dc065da28278dbfd43f2fc61201
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-issc-007122.vuw.leidenuniv.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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