lb-ces-acc.ucms.rug.nl

- Rijksuniversiteit Groningen -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 62:98:8f:58:07:8a:1f:ca:14:c7:e4:e1:f7:1c:c9:df was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Rijksuniversiteit Groningen

Organization: Rijksuniversiteit Groningen
State / Province: Groningen
Locality: Groningen
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 62:98:8f:58:07:8a:1f:ca:14:c7:e4:e1:f7:1c:c9:df
Serial Number (int): 131056480068404049741198983254119336415
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ae:c1:14:07:7f:2a:12:5b:c5:96:7f:d4:15:fc:41:e0:1a:d9:88:19
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 6b:80:bc:19:7c:e8:c6:a8:de:7a:0c:40:69:88:77:2e:96:d6:b4:b6
Fingerprint (sha256): 08:78:5b:02:bc:ff:e2:ad:32:c2:20:e7:ba:17:23:f6:41:53:f4:28:e0:ea:7b:d6:a0:ad:b3:77:bf:7a:18:51

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate lb-ces-acc.ucms.rug.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lb-ces-acc.ucms.rug.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lb-ces-acc.ucms.rug.nl

Other certificates including the domain name rug.nl

(limited to 100 certificates)
webhost12.service.rug.nl
fssc.gai.rug.nl
ag.id.rug.nl
molgenis21.gcc.rug.nl
menu.ub.rug.nl
*.test.euclid.astro.rug.nl
sandbox-ssh.web.rug.nl
registry.webhosting.rug.nl
signon.rug.nl
molgenis104.gcc.rug.nl
rooster.rug.nl
fwn-biol-144-174.biol.rug.nl
topdesk.service.rug.nl
russischcentrum.ub.rug.nl
pan-209.nema.rug.nl
es-testdev01.ucms.rug.nl
dnpprepo.ub.rug.nl
test-sp.ucms.rug.nl
molgenis114.gcc.rug.nl
mijnrugpas.rug.nl
iwi232.iwinet.rug.nl
molgenis53.target.rug.nl
www.let.rug.nl
toptst01.serverspace.rug.nl
geo-test.rug.nl
cfs001.workspace.rug.nl
rabbitmq.web.rug.nl
molgenis14.target.rug.nl
monk.hpc.rug.nl
molgenis112.gcc.rug.nl
molgenis66.gcc.rug.nl
tst-idp.id.rug.nl
wordrobe.housing.rug.nl
new.tweets.dnpp.ub.rug.nl
gaiisap1.rcbiv.rug.nl
streaming13.serverspace.rug.nl
gaiisap1.rcbiv.rug.nl
doi.ub.rug.nl
molgenis113.gcc.rug.nl
webhost-ng.service.rug.nl
flexo.gcc.rug.nl
healthpsychology.cmb.med.rug.nl
apodat.iadb.nl
webhost3.service.rug.nl
survey.ai.rug.nl
acc-ugp.ub.rug.nl
examspace.vpn.rug.nl
molgenis109.gcc.rug.nl
meet.web.rug.nl
mypc1.service.rug.nl
molgenis70.gcc.rug.nl
share.ub.rug.nl
urd2.let.rug.nl
student.rug.nl
web2-prod.gai.rug.nl
profiling.hpc.rug.nl
mijnrugpas.rug.nl
orbishistorical.ub.rug.nl
rechtenscripties.eprints.rieven.ub.rug.nl
pmb.let.rug.nl
beaker.service.rug.nl
rng.gmw.rug.nl
trr-ev.id.rug.nl
xfactor.rug.nl
wencke4.housing.rug.nl
ads005.workspace.rug.nl
molgenis13.gcc.rug.nl
molgenis60.target.rug.nl
oasback.gai.rug.nl
libcal.rug.nl
molgenis01.gcc.rug.nl
acc-vvd.ub.rug.nl
pwstst.gai.rug.nl
horafinita.rug.nl
archresc2.service.rug.nl
cit-toasta1.serverspace.rug.nl
lb-ces-acc.ucms.rug.nl
pan.service.rug.nl
ocmp.phys.rug.nl
depa-images.ub.rug.nl
signal.web.rug.nl
chat.astro.rug.nl
rugpasfoto.webhosting.rug.nl
git.lwp.rug.nl
edusupport.rug.nl
gadgets.rug.nl
ocmp.phys.rug.nl
zabbix-cit.service.rug.nl
scoop-portal.data.rug.nl
test-pure-form.ub.rug.nl
bi.gai.rug.nl
molgenis97.gcc.rug.nl
molgenis04.target.rug.nl
mailserver.astro.rug.nl
poewaai.ub.rug.nl
personeel.ub.rug.nl
rl01.gai.rug.nl
dzn.eldoc.ub.rug.nl
support.horafinita.ub.rug.nl
urendeclaratie.gai.rug.nl

Certificate

The complete raw certificate details for lb-ces-acc.ucms.rug.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 131056480068404049741198983254119336415
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Groningen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Groningen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rijksuniversiteit Groningen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lb-ces-acc.ucms.rug.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 912998727109121306887128516999732438534838573247563107861739974720747690391643839127052287829849833404576970685492601184820937369922242691190708003697114378362611908718325993121555189250611691713495125859043644541635519674313705111262589099236507333933492696731996934910103978139991940898494050868099192326216598073701935630900714476758331068015357253608236575409974048860885054145293429192685622421366830486830216116587337294307067550777175883052364584623801531125989965975244711234569259987222724277642832686673112403645680763833824124469360433700507190656911623324107307106939523499001915568270300227618812757680259463064934531273170549205372133960733913701159325414041053097699370532249959940289449000449765537625960451649052051488818945286134970676098448949600240933239789508843265723672511821406851298832321115346924425446981183847575685887542667655411800701974295693589794371439968519415390218596394598809974899049057756239186925030024359088757242598604335924921111649132132425529980069549062199338552837950302047501088776886495685259169870929976475498526997465630647350780923471615991722264128739589721487969161513307388078789493027516938178698877691075107626262886521106676811238674877751993860994698889463815099796024010201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aec114077f2a125bc5967fd415fc41e01ad98819
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lb-ces-acc.ucms.rug.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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