de.gs.uoa.gr

- National and Kapodistrian University of Athens -

Issued by HARICA Institutional TLS RSA 2

About this certificate

This digital certificate with serial number 5a:89:f4:95:ff:03:a5:e9:ac:a6:7d:dd:d5:b4:04:59 was issued on by Hellenic Academic and Research Institutions CA.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

National and Kapodistrian University of Athens

Organization: National and Kapodistrian University of Athens
Locality: Athens
Country: GR

Hellenic Academic and Research Institutions CA

Organization: Hellenic Academic and Research Institutions CA
Country: GR

This certificate will expire on

Certificate Details

Serial Number (hex): 5a:89:f4:95:ff:03:a5:e9:ac:a6:7d:dd:d5:b4:04:59
Serial Number (int): 120346825082124293362324706480209790041
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a0:08:cf:24:ae:3b:ee:f5:77:fa:4e:2e:0c:b1:77:d9:bc:27:5e:1d

Fingerprint (sha1): 8a:0e:b6:69:0c:df:06:5e:64:db:37:55:b7:8e:a6:fb:18:a4:5f:d5
Fingerprint (sha256): 0d:7d:6a:bb:5e:e5:b4:60:c4:66:4e:93:cb:1d:13:0c:65:2d:15:6b:c1:cf:49:53:18:5d:be:c7:81:f4:14:11

Issuing Certificate URL: http://crt.harica.gr/HARICA-Institutional-TLS-Sub-R2.cer

Revocation information

OCSP Server: http://ocsp.harica.gr
CRL Distribution Point: http://crl.harica.gr/HARICA-Institutional-TLS-Sub-R2.crl

Check the revocation status for certificate de.gs.uoa.gr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for de.gs.uoa.gr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

de.gs.uoa.gr

Other certificates including the domain name uoa.gr

(limited to 100 certificates)
epraetpemre.soctheol.uoa.gr
rslab-el.geol.uoa.gr
portal.catris.eu
lvcnaxos2019.enl.uoa.gr
manuscripts-en.theol.uoa.gr
vatopedi.di.uoa.gr
adedu-microteaching.primedu.uoa.gr
lrms-en.med.uoa.gr
www.elke.uoa.gr
pid.med.uoa.gr
blocks.elke.uoa.gr
museum.di.uoa.gr
sportsvehicledesign.core.uoa.gr
refugee.psych.uoa.gr
electoral-register.uoa.gr
cg.turkmas.uoa.gr
aerospace.uoa.gr
peponi.noc.uoa.gr
nanomed.med.uoa.gr
dl016.madgik.di.uoa.gr
gifts.uoa.gr
qeccora-en.geol.uoa.gr
gain.di.uoa.gr
pindos.uoa.gr
meteo.di.uoa.gr
ma-theology.soctheol.uoa.gr
forensicpsychiatry.med.uoa.gr
dms.uoa.gr
helpdesk-devel.uoa.gr
ekopda.pspa.uoa.gr
bscw.uoa.gr
eeep-en.pspa.uoa.gr
healthsurveys.med.uoa.gr
dl105.madgik.di.uoa.gr
dl119.madgik.di.uoa.gr
webmail02.uoa.gr
dimsid.noc.uoa.gr
dsurg.med.uoa.gr
webmail.uoa.gr
elearn.elke.uoa.gr
autoconfig.uoa.gr
capsella-pilots.madgik.di.uoa.gr
mpl.med.uoa.gr
earthsciences-environment.geol.uoa.gr
nuclpart.phys.uoa.gr
addictology-en.med.uoa.gr
new.turkmas.uoa.gr
mathdid.primedu.uoa.gr
wifi.uoa.gr
sites2.uoa.gr
maps.uoa.gr
clinlab-fr.psych.uoa.gr
cultech2.di.uoa.gr
ric.dind.uoa.gr
etraining-pdxg.enl.uoa.gr
contracts.uoa.gr
dimos.med.uoa.gr
geoterm.turkmas.uoa.gr
meteo.di.uoa.gr
UOA bscw service
capsella-services.madgik.di.uoa.gr
synergasia.uoa.gr
etraining-pdxg.enl.uoa.gr
dms.elke.uoa.gr
dms-test.uoa.gr
eclass.di.uoa.gr
guest.uoa.gr
gifts.uoa.gr
refugee.psych.uoa.gr
aresibo-ssp.di.uoa.gr
dl016.madgik.di.uoa.gr
lime.uoa.gr
meteo.di.uoa.gr
cogsci-en.phs.uoa.gr
cyberpsychology-en.psych.uoa.gr
ic2020.theol.uoa.gr
crypto.di.uoa.gr
stressmaster-en.med.uoa.gr
scale.di.uoa.gr
npmc.pharm.uoa.gr
geoterm.turkmas.uoa.gr
template1-en.noc.uoa.gr
deanshs-en.uoa.gr
node-241.med.uoa.gr
ossa.uoa.gr
cg.turkmas.uoa.gr
UOA webmail service
UOA wfm service
epraetpemre.soctheol.uoa.gr
de.gs.uoa.gr
ww1-music-conf.music.uoa.gr
contemporaryphilosophy.phs.uoa.gr
biology.med.uoa.gr
phycotheca-el.biol.uoa.gr
di.uoa.gr
galena.di.uoa.gr
mhmd.madgik.di.uoa.gr
phweb.psych.uoa.gr
o365.uoa.gr
gain.di.uoa.gr

Certificate

The complete raw certificate details for de.gs.uoa.gr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgBT30M27F+4tr1rJpVD
zVj9KPhZXx5H29gJHzv2GYSGqXQMtAY0wTNfkv9M0tWbNVsqJkbfLSSv0vakIfej
9Fr2TcPKEXMjcuZuODgMMdHvrhxexpdAhtKvHsErHfxirlEygNXEkr0zTB7RV2od
ry+FBrdgcVhvkjwDPwaJlN89twN23d/zSU2ZYmx4Y9VSbHreRf3qVBFWxQkAw/aP
FXisCA6wJslcnwcCEDocqTTLtDfcTs8Hc37ei9jKoMX3mMgAYEHzPW4E4xcOdnjW
lzcMyASCJGFNhbQJZtrbe5bIlZopOu9FAr3ezedzmzMxkOpwhJmkm9oVJZQX8Qam
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 120346825082124293362324706480209790041
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hellenic Academic and Research Institutions CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HARICA Institutional TLS RSA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 14:58:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-19 14:58:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Athens'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'National and Kapodistrian University of Athens'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'de.gs.uoa.gr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23985439501689905315471439765090143987241235530936152980672630695501602615353336191418453463221316328662702051932969741003468409498106922548655283237406798997728468088809656161755832986822378358912172762586113261205538866506883120819391122749101182507342578851009360022198414792747497033194309034506805854331166230773215956450122188387530708116237575060895936779766472180690298110584029794083804047108088761976822277066776775476827317622942034265243025211192616093174717768442228936199424662378739976544524607288470919288691744531800832686098636330619486570303748987630987147660185981137970559282805814398691230263027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a008cf24ae3beef577fa4e2e0cb177d9bc275e1d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.harica.gr/HARICA-Institutional-TLS-Sub-R2.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.harica.gr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.gs.uoa.gr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.26513.1.1.1.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.harica.gr/HARICA-Institutional-TLS-Sub-R2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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