rugpasfoto.webhosting.rug.nl

- Rijksuniversiteit Groningen -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0e:26:e0:7d:df:40:6f:f5:e3:67:ff:5b:c9:a0:48:74 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Rijksuniversiteit Groningen

Organization: Rijksuniversiteit Groningen
Locality: Groningen
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:26:e0:7d:df:40:6f:f5:e3:67:ff:5b:c9:a0:48:74
Serial Number (int): 18811052453977735088888150802883954804
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 98:56:42:45:df:60:33:d1:a2:c3:26:09:2e:19:d1:bb:ff:86:44:f9
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 61:64:25:e8:1c:3d:e6:14:b5:e9:d1:5e:5e:00:d4:1f:48:aa:ed:37
Fingerprint (sha256): 09:20:93:ba:46:8f:f5:2a:73:4e:72:c9:bc:e6:55:63:27:ca:37:5a:f7:ca:95:68:96:3e:b4:68:1d:c7:db:a0

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate rugpasfoto.webhosting.rug.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rugpasfoto.webhosting.rug.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rugpasfoto.webhosting.rug.nl

Other certificates including the domain name rug.nl

(limited to 100 certificates)
webhost12.service.rug.nl
fssc.gai.rug.nl
ag.id.rug.nl
molgenis21.gcc.rug.nl
menu.ub.rug.nl
*.test.euclid.astro.rug.nl
sandbox-ssh.web.rug.nl
registry.webhosting.rug.nl
signon.rug.nl
molgenis104.gcc.rug.nl
rooster.rug.nl
fwn-biol-144-174.biol.rug.nl
topdesk.service.rug.nl
russischcentrum.ub.rug.nl
pan-209.nema.rug.nl
es-testdev01.ucms.rug.nl
dnpprepo.ub.rug.nl
test-sp.ucms.rug.nl
molgenis114.gcc.rug.nl
mijnrugpas.rug.nl
iwi232.iwinet.rug.nl
molgenis53.target.rug.nl
www.let.rug.nl
toptst01.serverspace.rug.nl
geo-test.rug.nl
cfs001.workspace.rug.nl
rabbitmq.web.rug.nl
molgenis14.target.rug.nl
monk.hpc.rug.nl
molgenis112.gcc.rug.nl
molgenis66.gcc.rug.nl
tst-idp.id.rug.nl
wordrobe.housing.rug.nl
new.tweets.dnpp.ub.rug.nl
gaiisap1.rcbiv.rug.nl
streaming13.serverspace.rug.nl
gaiisap1.rcbiv.rug.nl
doi.ub.rug.nl
molgenis113.gcc.rug.nl
webhost-ng.service.rug.nl
flexo.gcc.rug.nl
healthpsychology.cmb.med.rug.nl
apodat.iadb.nl
webhost3.service.rug.nl
survey.ai.rug.nl
acc-ugp.ub.rug.nl
examspace.vpn.rug.nl
molgenis109.gcc.rug.nl
meet.web.rug.nl
mypc1.service.rug.nl
molgenis70.gcc.rug.nl
share.ub.rug.nl
urd2.let.rug.nl
student.rug.nl
web2-prod.gai.rug.nl
profiling.hpc.rug.nl
mijnrugpas.rug.nl
orbishistorical.ub.rug.nl
rechtenscripties.eprints.rieven.ub.rug.nl
pmb.let.rug.nl
beaker.service.rug.nl
rng.gmw.rug.nl
trr-ev.id.rug.nl
xfactor.rug.nl
wencke4.housing.rug.nl
ads005.workspace.rug.nl
molgenis13.gcc.rug.nl
molgenis60.target.rug.nl
oasback.gai.rug.nl
libcal.rug.nl
molgenis01.gcc.rug.nl
acc-vvd.ub.rug.nl
pwstst.gai.rug.nl
horafinita.rug.nl
archresc2.service.rug.nl
cit-toasta1.serverspace.rug.nl
lb-ces-acc.ucms.rug.nl
pan.service.rug.nl
ocmp.phys.rug.nl
depa-images.ub.rug.nl
signal.web.rug.nl
chat.astro.rug.nl
rugpasfoto.webhosting.rug.nl
git.lwp.rug.nl
edusupport.rug.nl
gadgets.rug.nl
ocmp.phys.rug.nl
zabbix-cit.service.rug.nl
scoop-portal.data.rug.nl
test-pure-form.ub.rug.nl
bi.gai.rug.nl
molgenis97.gcc.rug.nl
molgenis04.target.rug.nl
mailserver.astro.rug.nl
poewaai.ub.rug.nl
personeel.ub.rug.nl
rl01.gai.rug.nl
dzn.eldoc.ub.rug.nl
support.horafinita.ub.rug.nl
urendeclaratie.gai.rug.nl

Certificate

The complete raw certificate details for rugpasfoto.webhosting.rug.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18811052453977735088888150802883954804
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Groningen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rijksuniversiteit Groningen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rugpasfoto.webhosting.rug.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 622195605630414814267670011751504561557765688752896395151424108037084816114548270403967982481908066461627461292227740432751684142123426482178593649685789580085313815517307255398332681629890146780343769863506652993935139496746541028363710499891860110974192472786333715345420953443369451327373408751662005265011787837475197073483799130423672050534853635456981738155399409688965109461509232774428498817112806004054834414983116386928694149143182323159761464866490478900143020653635074969368045773128996714034012164699403177018427746738163493103225861747531457026873534018953921647372956191400181748869480078164391621488146167360106160655528603926665000892462657408941621725167583185539625660284849642761979236170593450667182615090924406918978480056544600459073051428459351078295774365752700822424453075481571732693148599018983833363234698297958876449783741560978726929068537984479317661378690878728419536183551635051389745432876837457448904788751325009726151697432282086336543307575045905073479980220497024118116975411967238359242146184750436271380321375845635956656541887734899417084177958021461970855377270448719716703723277191652357008304248180200658652144368728794721505307857756911222455594865104488729756831247278822764679560129541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98564245df6033d1a2c326092e19d1bbff8644f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugpasfoto.webhosting.rug.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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