support.horafinita.ub.rug.nl

- Rijksuniversiteit Groningen -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number fa:20:e0:5f:ea:62:7e:74:75:1f:16:ab:46:a1:12:5d was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Rijksuniversiteit Groningen

Organization: Rijksuniversiteit Groningen
State / Province: Groningen
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): fa:20:e0:5f:ea:62:7e:74:75:1f:16:ab:46:a1:12:5d
Serial Number (int): 332477703304667303734307399541505200733
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d3:06:ea:17:2d:37:f0:0a:4e:40:96:0b:ac:ae:79:aa:db:17:2c:cc
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 30:74:9e:14:0d:93:f2:54:7b:bf:67:d1:58:de:7e:fa:d5:47:24:55
Fingerprint (sha256): 0a:78:0c:c1:57:e4:54:79:59:f5:db:6b:cf:0c:14:81:23:1b:00:91:71:e9:27:4d:09:1c:0a:20:2c:01:62:f9

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate support.horafinita.ub.rug.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.horafinita.ub.rug.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

support.horafinita.ub.rug.nl

Other certificates including the domain name rug.nl

(limited to 100 certificates)
webhost12.service.rug.nl
fssc.gai.rug.nl
ag.id.rug.nl
molgenis21.gcc.rug.nl
menu.ub.rug.nl
*.test.euclid.astro.rug.nl
sandbox-ssh.web.rug.nl
registry.webhosting.rug.nl
signon.rug.nl
molgenis104.gcc.rug.nl
rooster.rug.nl
fwn-biol-144-174.biol.rug.nl
topdesk.service.rug.nl
russischcentrum.ub.rug.nl
pan-209.nema.rug.nl
es-testdev01.ucms.rug.nl
dnpprepo.ub.rug.nl
test-sp.ucms.rug.nl
molgenis114.gcc.rug.nl
mijnrugpas.rug.nl
iwi232.iwinet.rug.nl
molgenis53.target.rug.nl
www.let.rug.nl
toptst01.serverspace.rug.nl
geo-test.rug.nl
cfs001.workspace.rug.nl
rabbitmq.web.rug.nl
molgenis14.target.rug.nl
monk.hpc.rug.nl
molgenis112.gcc.rug.nl
molgenis66.gcc.rug.nl
tst-idp.id.rug.nl
wordrobe.housing.rug.nl
new.tweets.dnpp.ub.rug.nl
gaiisap1.rcbiv.rug.nl
streaming13.serverspace.rug.nl
gaiisap1.rcbiv.rug.nl
doi.ub.rug.nl
molgenis113.gcc.rug.nl
webhost-ng.service.rug.nl
flexo.gcc.rug.nl
healthpsychology.cmb.med.rug.nl
apodat.iadb.nl
webhost3.service.rug.nl
survey.ai.rug.nl
acc-ugp.ub.rug.nl
examspace.vpn.rug.nl
molgenis109.gcc.rug.nl
meet.web.rug.nl
mypc1.service.rug.nl
molgenis70.gcc.rug.nl
share.ub.rug.nl
urd2.let.rug.nl
student.rug.nl
web2-prod.gai.rug.nl
profiling.hpc.rug.nl
mijnrugpas.rug.nl
orbishistorical.ub.rug.nl
rechtenscripties.eprints.rieven.ub.rug.nl
pmb.let.rug.nl
beaker.service.rug.nl
rng.gmw.rug.nl
trr-ev.id.rug.nl
xfactor.rug.nl
wencke4.housing.rug.nl
ads005.workspace.rug.nl
molgenis13.gcc.rug.nl
molgenis60.target.rug.nl
oasback.gai.rug.nl
libcal.rug.nl
molgenis01.gcc.rug.nl
acc-vvd.ub.rug.nl
pwstst.gai.rug.nl
horafinita.rug.nl
archresc2.service.rug.nl
cit-toasta1.serverspace.rug.nl
lb-ces-acc.ucms.rug.nl
pan.service.rug.nl
ocmp.phys.rug.nl
depa-images.ub.rug.nl
signal.web.rug.nl
chat.astro.rug.nl
rugpasfoto.webhosting.rug.nl
git.lwp.rug.nl
edusupport.rug.nl
gadgets.rug.nl
ocmp.phys.rug.nl
zabbix-cit.service.rug.nl
scoop-portal.data.rug.nl
test-pure-form.ub.rug.nl
bi.gai.rug.nl
molgenis97.gcc.rug.nl
molgenis04.target.rug.nl
mailserver.astro.rug.nl
poewaai.ub.rug.nl
personeel.ub.rug.nl
rl01.gai.rug.nl
dzn.eldoc.ub.rug.nl
support.horafinita.ub.rug.nl
urendeclaratie.gai.rug.nl

Certificate

The complete raw certificate details for support.horafinita.ub.rug.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332477703304667303734307399541505200733
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Groningen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rijksuniversiteit Groningen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.horafinita.ub.rug.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 706324204012910469589055985557312955518100250797867863165572449609066067540852247303915789309933447360690725869741470422796650228875124973876899138252768310652984783648925377079744178160088436712737623032439319325940340704965144344866368740792708976165617101798643233211509203339561461060369991135737972935043334667737326068560707301015854954495067083408221438741838135681803461848688219466513578198064534431107222716057161891399764196833441550447054049541666024992136375787372085945597602548555303206600885888979282367730537095913627942663922511875697142903579102236381885626839222122010791626233650691885639957820135117176294398575771640030112874614236484337408687013650848092621991810973653352214370747943954189204807550795542556709088776313462614530765838406155502272431193631302839045193497819960305769427900239976625296847269448728871579725367583499522834697679297329442532796207315974311739144471613986962299219348041060200485202165032051359917788442068804834575481624987779159560176145566013551584828959570037652614778993803337574347331548696835113219978446672446697432869799149016700517388903724571006477285537040481539578267575789747185226986853797841103161963331906426569010845233776986220199444010260890566618351777952113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d306ea172d37f00a4e40960bacae79aadb172ccc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.horafinita.ub.rug.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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