nmis.roedu.net

Issued by TERENA SSL CA

About this certificate


This digital certificate with serial number d3:c3:34:ac:8a:24:a1:ab:cc:5e:b8:2c:b9:92:11:41 was issued on by TERENA .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

nmis.roedu.net

Organization unit: Domain Control Validated

TERENA

Organization: TERENA

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): d3:c3:34:ac:8a:24:a1:ab:cc:5e:b8:2c:b9:92:11:41
Serial Number (int): 281480673353328099065569982935278424385
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a8:e2:f7:7e:86:23:53:3a:b1:67:48:0b:dc:09:0c:80:2d:be:80:c8
AuthorityKeyId: 0c:bd:93:68:0c:f3:de:ab:a3:49:6b:2b:37:57:47:ea:90:e3:b9:ed

Fingerprint (sha1): d1:1a:40:c3:f1:0e:aa:b9:65:8a:b4:36:ba:d6:cc:ff:51:d4:1a:6b
Fingerprint (sha256): 02:3e:c1:72:2d:63:d5:94:4b:2e:7d:50:6e:14:32:32:09:3f:ec:da:9e:47:65:fa:cf:14:93:89:2f:62:2e:cb

Issuing Certificate URL: http://crt.tcs.terena.org/TERENASSLCA.crt

Revocation information

OCSP Server: http://ocsp.tcs.terena.org
CRL Distribution Point: http://crl.tcs.terena.org/TERENASSLCA.crl

Check the revocation status for the current certificate on nmis.roedu.net
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

nmis.roedu.net
www.nmis.roedu.net

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIRANPDNKyKJKGrzF64LLmSEUEwDQYJKoZIhvcNAQEFBQAw NjELMAkGA1UEBhMCTkwxDzANBgNVBAoTBlRFUkVOQTEWMBQGA1UEAxMNVEVSRU5B IFNTTCBDQTAeFw0xNDAzMDMwMDAwMDBaFw0xNTAzMDMyMzU5NTlaMDwxITAfBgNV BAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRlZDEXMBUGA1UEAxMObm1pcy5yb2Vk dS5uZXQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC7QkBuuxzcK7lA mdx4DvbMMlLWDzM0rSgeeii0jzRcXhtVaNkxFwd5G1fDevfA1FSYU7Ub7A3l3V9M wuw4Zob2SGMpEwBIymfRoQBIktAedERFcpLd2I9ZMRCxhjkhlJskZ1DoNLmVvoJu yV5cQPovuZNieiDE4bWTq5DwL6/ZoTmbGLG32cmSTBbwcz/FDL57IqSim2W3uj2F zsbDpoFXMMdPQ/j1MGm4QWfqm4TG7Ky4iNcT0TWvFW4GheHmYWw9BOhViOmyMyzH bu97ygk7uPk0m3LDSgLxB3Jy52PZxlhBAKCKNjSZzOU2doPMIu7HxV1F2bhpsEAq XBaDVhGYGt0fr1/WvfErpltlLx+hEiJ1Fr6cnY5ekxHwY6wr8JsxgUPuBS3XOhwc YNcU1c9KZEExQ+8CVu65CvlkM0moF/j373gVQ+Zv80hw4FzsCL56ZIdsozQGo1hY g64AkiwLxuAAcadnxHxot9KCdYyZdvCfxqMdUfuGI+KBG8ocisTJbpC3lejBQaWL oHK9NoYjm1m6Uu4DFqcURsiZ0QV4zUJxT1YpzUE2Omje9uuZ7eTTUodeVkCgl0sL pUBwsnvl2hCa7KIk8fOsi4yL8OSjZuPU3eo2/DDRwaV1sadxD0IN62VSfARzPqT9 I78UuLuNOywExA/kz1G+3eh6FPDjKwIDAQABo4IBfzCCAXswHwYDVR0jBBgwFoAU DL2TaAzz3qujSWsrN1dH6pDjue0wHQYDVR0OBBYEFKji936GI1M6sWdIC9wJDIAt voDIMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAiBgNVHSAEGzAZMA0GCysGAQQBsjEBAgIdMAgGBmeB DAECATA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsLnRjcy50ZXJlbmEub3Jn L1RFUkVOQVNTTENBLmNybDBtBggrBgEFBQcBAQRhMF8wNQYIKwYBBQUHMAKGKWh0 dHA6Ly9jcnQudGNzLnRlcmVuYS5vcmcvVEVSRU5BU1NMQ0EuY3J0MCYGCCsGAQUF BzABhhpodHRwOi8vb2NzcC50Y3MudGVyZW5hLm9yZzAtBgNVHREEJjAkgg5ubWlz LnJvZWR1Lm5ldIISd3d3Lm5taXMucm9lZHUubmV0MA0GCSqGSIb3DQEBBQUAA4IB AQA2pHfPYiRaXVOseb2UD/eozBjmmIlSZHcGbMMX4h4FJOsCfkjvJRZCQ1rtpPdQ HSHPXrqEomTg1vDZ1oTvp3YYb3eoWoVFGldpSPffUCotteq2Pll4wjMPvFWCpZpH BmBfmBYaW4GBngHl6TGDjbhwNQ9NV4JzMFwjAWyy/7rKKheY2cMe5ZL23I/m/xqW UySldmn3PcsOQ0pqfwHYbFo51ayZBF1uVIm3MX4x41FhtMLTvOxClBjH+YH7v6cB EATeQbps5VYQG2X/0AWF4IEWjcONxO0EiuAsaUjtqheW9MBZ8sLF8uFxhWNrNU1g d3R9a6j9/NgsZMaeI0KNz+Pp -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu0JAbrsc3Cu5QJnceA72 zDJS1g8zNK0oHnootI80XF4bVWjZMRcHeRtXw3r3wNRUmFO1G+wN5d1fTMLsOGaG 9khjKRMASMpn0aEASJLQHnRERXKS3diPWTEQsYY5IZSbJGdQ6DS5lb6CbsleXED6 L7mTYnogxOG1k6uQ8C+v2aE5mxixt9nJkkwW8HM/xQy+eyKkoptlt7o9hc7Gw6aB VzDHT0P49TBpuEFn6puExuysuIjXE9E1rxVuBoXh5mFsPQToVYjpsjMsx27ve8oJ O7j5NJtyw0oC8Qdycudj2cZYQQCgijY0mczlNnaDzCLux8VdRdm4abBAKlwWg1YR mBrdH69f1r3xK6ZbZS8foRIidRa+nJ2OXpMR8GOsK/CbMYFD7gUt1zocHGDXFNXP SmRBMUPvAlbuuQr5ZDNJqBf49+94FUPmb/NIcOBc7Ai+emSHbKM0BqNYWIOuAJIs C8bgAHGnZ8R8aLfSgnWMmXbwn8ajHVH7hiPigRvKHIrEyW6Qt5XowUGli6ByvTaG I5tZulLuAxanFEbImdEFeM1CcU9WKc1BNjpo3vbrme3k01KHXlZAoJdLC6VAcLJ7 5doQmuyiJPHzrIuMi/Dko2bj1N3qNvww0cGldbGncQ9CDetlUnwEcz6k/SO/FLi7 jTssBMQP5M9Rvt3oehTw4ysCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 281480673353328099065569982935278424385 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nmis.roedu.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763949234909423316860996789372531971214511097726528739531669466150746204694874726397520470288477780505933991466084840219236323804241100260298643017060529330755100949483879338195571248076130194133203685534939016470295859754417050476678006691269783533147929092845581636424079394590002242367969573559850467845495691353562666792138316966148726148499676919166838595497491707783581410314550016830316019087412086272126767525455926253096949061347389375226590988433224805994602227862422736819248815098612360994950060790629583352126231805565066934206758363773645492478570652588527216080514966395245306733753231675503550917553854422495784472086130012814436153515303824159021815190314541220843762786131797797638443309981520545113190771560976038506375393450113234693043446242555703758760381085915454367592042911116029724102890679857291735666162283639305050742795294017711998740173161633746699185585269621439122325126222058258062561875246871840109811580884161059600860730813457504390580966990084722659180853777684477155018562518210195570528186144940610035726800065684945717852207750756379552738382121534857163529370564125102799540274033432972190191300732248997074054957106183000949242546575438958257305514594354537375340590215150362753337687860011 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cbd93680cf3deaba3496b2b375747ea90e3b9ed . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a8e2f77e8623533ab167480bdc090c802dbe80c8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.tcs.terena.org/TERENASSLCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.tcs.terena.org/TERENASSLCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tcs.terena.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmis.roedu.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nmis.roedu.net' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0036a477cf62245a5d53ac79bd940ff7a8cc18e69889526477066cc317e21e0524eb027e48ef251642435aeda4f7501d21cf5eba84a264e0d6f0d9d684efa776186f77a85a85451a576948f7df502a2db5eab63e5978c2330fbc5582a59a4706605f98161a5b81819e01e5e931838db870350f4d578273305c23016cb2ffbaca2a1798d9c31ee592f6dc8fe6ff1a965324a57669f73dcb0e434a6a7f01d86c5a39d5ac99045d6e5489b7317e31e35161b4c2d3bcec429418c7f981fbbfa7011004de41ba6ce556101b65ffd00585e081168dc38dc4ed048ae02c6948edaa1796f4c059f2c2c5f2e17185636b354d6077747d6ba8fdfcd82c64c69e23428dcfe3e9