*.ap.be

- ARTESIS PLANTIJN HOGESCHOOL ANTWERPEN -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 02:f0:9e:bf:12:e4:1c:9a:ce:15:59:f6:51:83:29:95 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ARTESIS PLANTIJN HOGESCHOOL ANTWERPEN

Organization: ARTESIS PLANTIJN HOGESCHOOL ANTWERPEN
Locality: Antwerpen
Country: BE

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 02:f0:9e:bf:12:e4:1c:9a:ce:15:59:f6:51:83:29:95
Serial Number (int): 3907826996761107910636725923175672213
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 0a:88:3c:0b:2b:0b:95:4d:2c:8e:36:8d:7b:19:27:82:31:43:7d:70
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 83:80:da:0a:a5:af:9e:95:3c:f3:36:6a:86:e9:2a:d3:7a:2a:ac:9d
Fingerprint (sha256): 08:37:cf:7f:bc:5b:4b:75:af:43:38:e7:bc:1b:e8:da:41:41:ae:43:7f:5a:8c:a9:eb:0b:6d:91:56:41:c4:3a

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate *.ap.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ap.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ap.be
ap.be

Other certificates including the domain name ap.be

(limited to 100 certificates)
inda.ap.be
ictpedia.ap.be
msimagine.ap.be
journalistiek.ap.be
journalistieknamen.ap.be
msimagine.ap.be
zorgneticuro.ap.be
inclusiedag.ap.be
showandtell.ap.be
gdm.ap.be
securelogin.ap.be
marketingshop.ap.be
eaict.ap.be
workshopweb.ap.be
senseofhome.ap.be
senseofhome.ap.be
eps.ap.be
eps.ap.be
feedback.ap.be
*.ap.be
e-campus.ap.be
inda.ap.be
eaict.ap.be
stats.ap.be
senseofhome.ap.be
filewave.ap.be
feedback.ap.be
msimagine.ap.be
sts.ap.be
ibamaflex.ap.be
showandtell.ap.be
beta.eaict.ap.be
marketingblog.ap.be
workathome.ap.be
antivirus.ap.be
msimagine.ap.be
journalistieknamen.ap.be
blokkenloop.ap.be
ai.ap.be
sr18.ap.be
feedback.ap.be
journalistiek.ap.be
wpnet.ap.be
jou3blog.ap.be
jou3blog.ap.be
blokkenloop.ap.be
journalistieknamen.ap.be
*.ap.be
stats.ap.be
aui.ap.be
stats.ap.be
dialoog.ap.be
*.ap.be
marketingblog.ap.be
senseofhome.ap.be
evasys.ap.be
surveys.ap.be
marketingblog.ap.be
surveys.ap.be
eps.ap.be
showandtell.ap.be
inda.ap.be
articulate.ap.be
blackboard.ap.be
journalistiek.ap.be
inclusiedag.ap.be
ai.ap.be
sr18.ap.be
eaict.ap.be
learning.ap.be
msimagine.ap.be
gdm.ap.be
ictpedia.ap.be
dialoog.ap.be
msimagine.ap.be
ictpedia.ap.be
webdeposit.ap.be
gitlab.ap.be
surveys.ap.be
rancher.ap.be
*.ap.be
*.dev.ap.be
ai.ap.be
blackboard.ap.be
inda.ap.be
stats.ap.be
cbbc.ap.be
ictpedia.ap.be
webmail.ap.be
cbbc.ap.be
ai.ap.be
*.staging.ap.be
showandtell.ap.be
ibamaflex.ap.be
jou3blog.ap.be
senseofhome.ap.be
journalistiek.ap.be
learning.ap.be
marketingblog.ap.be
inda.ap.be

Certificate

The complete raw certificate details for *.ap.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OfccS5oPsXyNyEKWOsZ
Ep3B8reeyQVmwOeP5IcGc0RGbCkACtlFqzMoahdpz+BzNdt4LnmHgXUap7L+BnSG
5FHeDmsOBeS/6UnlrbNEkR7dFhGFKBpw2VpqpQ1aDOS+KiKVMNYbtxmGUMKu5/ap
cQZffLXd0Mf38PvDrkcvBb4yFss/wg26LJxajerfxQpoUAmGF+0EsqjQm9PfiqsE
yfPDMYMMIjZYYP3UlYN05El+b8kQwM4K8a/T7OM+DAnvBYtSD8WYPv10yN8GgELA
34Tz6u8Hoy9Cqti7IOvwQmVSyOddXn20wqVtH5k4ul9gP+0oc01O6ej8oiditOk8
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3907826996761107910636725923175672213
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Antwerpen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ARTESIS PLANTIJN HOGESCHOOL ANTWERPEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ap.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28391715283120608060842333843848291536593950983828017254477314207939286522779428457128716833713276399790278007905170253977372819719413747406608464130402456858578605200582803520902668004734088748809501781692283737966950337810017471825614055925851993555307103462434013736836076166324262037449890097294467008969738407964834047914274904425142895317583112710308979060067329747426699854386918512166888634299999277513832083421665964029981340470065713209943073335971009499775917330432141786722129612398146996684400157409472922029170617001606074271250106038534362261460420843114951034870536058085172611636988925145392515464339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a883c0b2b0b954d2c8e368d7b19278231437d70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ap.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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