*.bibl.sh.se

- Södertörns högskola -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 5a:8b:95:88:51:a0:63:2e:c7:0d:bb:52:6b:a1:1d:b8 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Södertörns högskola

Organization: Södertörns högskola
State / Province: Stockholms län
Country: SE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:8b:95:88:51:a0:63:2e:c7:0d:bb:52:6b:a1:1d:b8
Serial Number (int): 120355281763301997944394104348499582392
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 59:be:25:50:07:a5:d5:fb:e8:54:19:04:77:3b:5d:af:aa:7a:80:63
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): dc:f3:96:00:0a:16:26:35:91:06:46:66:82:53:30:b6:3e:18:5e:2b
Fingerprint (sha256): 0d:d3:d3:70:7f:46:77:d8:33:64:ba:f1:fd:14:84:a2:1f:5a:f8:d1:77:94:56:c4:25:bb:28:b6:99:dc:b7:82

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.bibl.sh.se

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.bibl.sh.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bibl.sh.se
bibl.sh.se

Other certificates including the domain name sh.se

(limited to 100 certificates)
www.sh.se
ssd04.web.sh.se
graduateland.com
webappl.web.sh.se
*.till.biblextern.sh.se
bibl.sh.se
usersync.errai.sh.se
earkiv.sh.se
graduateland.com
rad1.eduroam.sh.se
*.bibl.sh.se
api.bibl.sh.se
graduateland.com
careergate.sh.se
careerland.dk
careergate.sh.se
play.sh.se
graduateland.com
webappo.web.sh.se
dubhe.suni.se
support.mi.sh.se
primula.sh.se
graduateland.com
graduateland.com
graduateland.com
graduateland.com
mob01.web.sh.se
av.sh.se
spk03.web.sh.se
graduateland.com
*.bibl.sh.se
kvalitet.sh.se
ssd02.web.sh.se
career.cphbusiness.dk
graduateland.com
career.cphbusiness.dk
primula.sh.se
career.cphbusiness.dk
*.till.biblextern.sh.se
api.sh.se
blogg.sh.se
career.cphbusiness.dk
graduateland.com
terebellum.suni.se
www.sh.se
career.cphbusiness.dk
careerland.dk
graduateland.com
primula.sh.se
*.bibl.sh.se
blogg.sh.se
career.cphbusiness.dk
bibl.sh.se
api.sh.se
careerland.dk
dubhe.suni.se
primula.sh.se
career.cphbusiness.dk
career.cphbusiness.dk
info.web.sh.se
apputv.sh.se
www.sh.se
itsl.bibl.sh.se
bibl.sh.se
api.sh.se
kronox-test.sh.se
student.web.sh.se
bibl-app.sh.se
*.till.biblextern.sh.se
graduateland.com
app.sh.se
rad2.eduroam.sh.se
careerland.dk
career.cphbusiness.dk
webappl.web.sh.se
apptest.sh.se
*.bibl.sh.se
www.sh.se
*.mi.sh.se
faktaassistenten.sh.se
faktaassistenten.sh.se
careergate.sh.se
www.sh.se
dubhe.suni.se
blogg.sh.se
itsl.bibl.sh.se
sim01.web.sh.se
apptest.sh.se
career.cphbusiness.dk
career.cphbusiness.dk
www.sh.se
graduateland.com
blogg.sh.se
*.web.sh.se
www.sh.se
bibl.sh.se
bibl.sh.se
api.sh.se
faktaassistenten.sh.se
student.mi.sh.se

Certificate

The complete raw certificate details for *.bibl.sh.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OhSBEktCY8/lOQhRziV
4eltaroouXsP9kPU20APgAxIy9PlIMwZDYWQk1RFmQsswxq2HQcEctcwuLvwjDNl
UWnEVYrknGczaHIwUtVadR0Vqr76pgfbybmjbp3EuwRYV7Cq8/nKN7C4ub9LgeVg
K3x9XFg/odZjG7jbntChOOJKf/6Bg2XW9sRWgMF4m+BzryECoiR+yqdAAMGeufXH
7+UudWy0YITcha4NWREGVx19q+JpX/10XBolEVdWNw69rO/FwIPokybDqS59LeNj
UP0cns9f0ekJv9IgsJp9S6T+VHROyYRgochxCdBYJSGqkW3L2nFil0mBSPk9xLN6
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 120355281763301997944394104348499582392
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stockholms län'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Södertörns högskola'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bibl.sh.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28391941760501677771614555914056897032459916932303730203882456867798349500895332375854277669384933121103884155467597590221450886144788537688633220821247312247535716149624182867759240946943498165121958182989976380253585139042054353581373548226884482187912981846237005560607523984900527175417236730192160184178502230989351627987672949049060657843482950258569021651738402803140827045085066399381715271724337095393869666814381386372074363238678541715696816777242664368069828541682249982618083766092371176085850329613754098951355811239172469511312949695600675281053162082831204032553021239338652764164311018152391240547067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59be255007a5d5fbe8541904773b5dafaa7a8063
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bibl.sh.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibl.sh.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018484db8bb00000040300473045022100cd6dfd02145d89a697c3e9a7c105f7a92aa67225876e720229eca61d61f067dc02201bca07e290a1a51fc05dc5a91b4d55eb3613fa4d9672f8ad0b311ffaa4dc991f0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018484db8b9e0000040300473045022100852ff019e2a43eb6115f71b1df3a0324e415d9f3cf94f37999f4ae0d3082063002201dca16dba01e9b7d2ba2f7652e439a461494a344ed5778d4f3cbfef72d64b0f4007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018484db8b640000040300463044022011014528128dbe717032984d9b2ecfc7d9f573af2128f80c57c2cd90348e876e0220543c309e9423613d9744c642dd2d1f1815ae8fefdecc49bd5c989ea61d375ba1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00980db18ed1e71c13ed75a21a4cbc6b3e6b358807f301e4c1adda12d527ccb1543007a0bb241ad030c01310a8bf8d26785397fa6cdae9f7c13a655ed4fce8967e8a434fde5497b8e0696fc7e91a0768b138959612cd330b26a39689045f39e692a9801edb1ddf6e279cc8833e5deda9a758b81ef48a4464ff5fcb91840f2df7ed5d90ddafaec09a30369ebf2b066428e3edf5b510e4db3580cb9e8ca4099d2e000277edae76a1bf0ec4d97f34387e70c33f22896c3ff33017ad24c54fd2fcd42e313323f468b93e795a36287d235744053616dea2e8eb4dd64a16b29c5696c06b6ce9af46be63fd85a94455bcd72a561f77c6c4558d6e1441baed174c0e6083b25c3726a4eaf6eda2d58ce825fccabb9c50f3aa104bbc145aaa19c858c0627541f3ba6261b9e77ae80241fe7b7090f8c0556a1ea565c8c3d0e82c43041bf095d4a3dd0ff2d5b9772b4378888e7c0cfc301cec0e5d96124aa3c415b0300766b1270fd692f0c4bd993b3929bbe1238af2b0444990d3fc3cb960258ed42d811d5763724ffe4c95daeeda60fefc06923fd5319aced24b3e8e7eb4a98e15cb398a3745d9a06530a8cad7c9d291a8bec6ce68ef2ab44f8158837ca7bf7d1f0fd2530b883d90b43c3987c59c60e11afba3e9011e6b8d262529f62cf42412f8c229c7c4cfe1760acda55335e8d5e30766c3fbb680d2883537abb6e1af94d73d2fd24606c6