osiris.zuyd.nl

- Stichting Zuyd Hogeschool -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number d7:50:d1:e0:0c:fb:8a:98:cc:f9:22:d0:2e:52:9d:4b was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stichting Zuyd Hogeschool

Organization: Stichting Zuyd Hogeschool
State / Province: Limburg
Locality: Heerlen
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): d7:50:d1:e0:0c:fb:8a:98:cc:f9:22:d0:2e:52:9d:4b
Serial Number (int): 286203659617173180282760206288879263051
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3f:4e:c5:0e:f0:fc:f3:e7:dc:70:f0:61:a5:c9:25:73:5a:fb:b6:a9
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 52:be:31:72:37:0a:05:33:64:0e:a0:fe:00:57:56:d8:6d:17:86:e6
Fingerprint (sha256): 0f:65:8d:1d:e9:0c:68:5c:4d:41:5b:e9:8b:77:f9:60:e6:ff:1e:35:25:97:08:f1:b5:4d:65:60:67:dc:48:58

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate osiris.zuyd.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for osiris.zuyd.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

osiris.zuyd.nl

Other certificates including the domain name zuyd.nl

(limited to 100 certificates)
desktop.zuyd.nl
print.zuyd.nl
gitlab.services.zuyd.nl
vpn.zuyd.nl
moodle.zuyd.nl
guest-networkaccess.zuyd.nl
osiris-basis.zuyd.nl
osirisdocent.zuyd.nl
account.zuyd.nl
icto.community.zuyd.nl
dataintelligence.zuyd.nl
tol.zuyd.nl
regularstudent.zuyd.nl
events-api.zuyd.nl
rbs.services.zuyd.nl
hybrid.zuyd.nl
idservice.zuyd.nl
osiris.zuyd.nl
*.test.zuyd.nl
qmp.zuyd.nl
account.zuyd.nl
tol.zuyd.nl
community.zuyd.nl
osirisacc-cursusinvoer.test.zuyd.nl
gateway.services.zuyd.nl
vpn.zuyd.nl
cardsonline.zuyd.nl
managementinfo.zuyd.nl
magic.zuyd.nl
exchangestudent.zuyd.nl
acceptatie.zuyd.nl
betalen.zuyd.nl
hybrid.zuyd.nl
direct-access.zuyd.nl
moodle.zuyd.nl
crmzuyd.nl
www.zuyd.nl
desktop.zuyd.nl
print.zuyd.nl
sorry.zuyd.nl
account.zuyd.nl
*.community.zuyd.nl
covoordummies.zuyd.nl
alumni.zuyd.nl
crmzuyd.nl
exchangestudent.zuyd.nl
desktop.zuyd.nl
centralerepro.zuyd.nl
dynamics.zuyd.nl
vpn.zuyd.nl
desktop.zuyd.nl
vpn.zuyd.nl
rooster.zuyd.nl
exchangestudent.zuyd.nl
webvpn.zuyd.nl
dataintelligence.zuyd.nl
tol.zuyd.nl
osirissup-basis.test.zuyd.nl
blackboard.zuyd.nl
sts.zuyd.nl
api.zuyd.nl
crmzuyd.nl
cardsonline.zuyd.nl
osirisprj-basis.test.zuyd.nl
help.zuyd.nl
gateway.services.zuyd.nl
sts.zuyd.nl
hotelschool.zuyd.nl
www.zuyd.nl
covoordummies.zuyd.nl
facilitynet.zuyd.nl
netlab.ict.zuyd.nl
*.test.zuyd.nl
covoordummies.zuyd.nl
digitaledidactiek.zuyd.nl
rbs.services.zuyd.nl
facilitynet.zuyd.nl
osiris-basis.zuyd.nl
magic.zuyd.nl
test.crm.server11m.eyehost.eu
rbs.services.zuyd.nl
dataintelligence.zuyd.nl
print.zuyd.nl
crmzuyd.nl
sorry.zuyd.nl
crmzuyd.nl
www.zuyd.nl
crmzuyd.nl
covoordummies.zuyd.nl
covoordummies.zuyd.nl
crmzuyd.nl
crmzuyd.nl
uaportal.hszuyd.nl
garfield.services.zuyd.nl
netdb.services.zuyd.nl
tol.zuyd.nl
netdb.services.zuyd.nl
print.zuyd.nl
osiris.zuyd.nl
vpn.zuyd.nl

Certificate

The complete raw certificate details for osiris.zuyd.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/4vwXn6lr9WLa/ZilQW
L8l/ArIwiQTw6eJk4nHvKSwi6YdMxIsXHYljYByfBi54GhDDpoTXLmUbZ5sl1PBL
CQ+pt4qLhAbSzlRF2SDT4SW6J/3woERxQit42J+/qCVAoylE8h7Y1BfPlVqFXv1A
7Vzg10gVGhfcYACV5kjUWTTO8MibwU0PTgs9tY0Kras+4PcUevD/V4+GuS4ZPPe4
spoJEWMwgs5XZ8sIcfnWgJs0TASZmLRRR/FkMzw+9hxKw3Jdr88c/ocx2QMyIYxA
0nlMMpujTwNranmnsFI03f9tdI2YQy3G3oYInS2yrtluqW9TroOV4RqhGX8GcWhl
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286203659617173180282760206288879263051
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Limburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Heerlen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Zuyd Hogeschool'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'osiris.zuyd.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21207140986785014341516389874380466201956282016008688618726694989946585789523106320305252477230320447648119500269496995169313856713502903629097126478797394061290608651035081701199686076572723375753383285013472038931206661968347084488140317920335064739394725901953468886222496196993568370274194125178512501723585639529285468711191355759224939147513221633856558298592356102923822183871050638355699377012393650736100094671607912997914779483458248977047036760275767413772946512446666610849177204773056774816427522802120304893416997762723287892377012398370816503720107216721320714357401803721912704411270048159425257563511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f4ec50ef0fcf3e7dc70f061a5c925735afbb6a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017f3fb4c7df0000040300463044022048cea58946151759f3e9b9e66c80c9322f3c23bdd1470f4a1aaf4f58363d9602022018f74385ae812b135359f0d05ca5f63420ded7caa0d804f2120e372f27c3aa010076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000017f3fb4c79600000403004730450220265b334cf3c1b52d76b14740facf82ca878ddd42c7a7955d5c34de38f935a9f2022100ada29eebe8a5c75841ec72cb60c8d1018521854fda327585bc681de6dd2540f9007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017f3fb4c773000004030046304402207696e8ef6d07dd495ac68b6ec6d472787f40af115fdb455554f1598c60aa609702204ef7252b15e90f7a5f17d945c682f6054da985f9ab346357df5abc9141b8e3d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osiris.zuyd.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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