gds.avi.deltares.nl

- Stichting Deltares -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 53:58:10:12:55:3d:7f:d4:3e:1f:78:05:3e:cf:70:02 was issued on by GEANT Vereniging.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stichting Deltares

Organization: Stichting Deltares
State / Province: Zuid-Holland
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 53:58:10:12:55:3d:7f:d4:3e:1f:78:05:3e:cf:70:02
Serial Number (int): 110783171744740239931351849331235713026
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d7:cd:ed:4c:2b:05:f1:20:d7:10:88:78:3d:73:b6:a4:f5:7f:d3:94
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): e4:41:e7:a8:1d:d7:b1:d4:58:43:93:db:3a:3a:94:8c:e1:64:16:03
Fingerprint (sha256): 16:d5:79:02:6a:1b:19:09:87:12:df:0a:2f:7f:30:a7:0b:7a:2c:b9:3a:1d:41:22:1f:6d:96:89:85:66:1a:4e

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate gds.avi.deltares.nl

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gds.avi.deltares.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gds.avi.deltares.nl
blueearthdata.org
metoceanatlas.nl
www.metoceanatlas.nl

Other certificates including the domain name deltares.nl

(limited to 100 certificates)
repos.deltares.nl
al-ng027.xtr.deltares.nl
va-mac099.domain.deltares.nl
glowasis.deltares.nl
sip.deltares.nl
issuetracker.deltares.nl
al-ng018.xtr.deltares.nl
svn.oss.deltares.nl
facilities.xtr.deltares.nl
shop.deltares.nl
circle.deltares.nl
issuetracker.deltares.nl
vcenter5.xtr.deltares.nl
iraqwatercrisis-iom.deltares.nl
tl-ng010.xtr.deltares.nl
oss.deltares.nl
*.deltares.nl
waterloupe.deltares.nl
tl-ng023.xtr.deltares.nl
testbuild.deltares.nl
oss.deltares.nl
webmail.deltares.nl
agenda.deltares.nl
svn.oss.deltares.nl
mail.domain.deltares.nl
waterloupe.deltares.nl
onlinesoftware.deltares.nl
tl-tc028.xtr.deltares.nl
crucible.deltares.nl
careers.deltares.nl
workspace.deltares.nl
al-ng007.xtr.deltares.nl
workspace.deltares.nl
issuetracker.avi.deltares.nl
meren.webservices.deltares.nl
ftp.deltares.nl
gds.avi.deltares.nl
v-web002.avi.deltares.nl
tl-ng012.xtr.deltares.nl
tl-ng045.xtr.deltares.nl
tl-ng018.xtr.deltares.nl
softwaredagen.deltares.nl
v-web002.deltares.nl
ast-backend.avi.deltares.nl
aw-tc005.xtr.deltares.nl
publicwiki-tst.deltares.nl
mail.deltares.nl
v-web002.deltares.nl
build.deltares.nl
al-ng043.xtr.deltares.nl
circle.deltares.nl
opendap-matroos.deltares.nl
al-ng018.xtr.deltares.nl
modeldata-nhi-data.deltares.nl
shop.deltares.nl
www.riverlab.deltares.nl
globalmodelviewer.deltares.nl
dw-oc002.xtr.deltares.nl
oss.deltares.nl
tl-ng044.xtr.deltares.nl
covadem.deltares.nl
repos.deltares.nl
tl-ws005.xtr.deltares.nl
intranet.deltares.nl
tl-tc030.xtr.deltares.nl
intranet.deltares.nl
tl-ng029.xtr.deltares.nl
pl-036.xtr.deltares.nl
content.oss.deltares.nl
fewsfoentest.deltares.nl
al-ng009.xtr.deltares.nl
tl-tc029.xtr.deltares.nl
publicwiki.deltares.nl
sip.deltares.nl
build.deltares.nl
tl-ng017.xtr.deltares.nl
vt-mac099.domain.deltares.nl
al-ng009.xtr.deltares.nl
www.deltares.nl
zabbix.xtr.deltares.nl
spacewalk.xtr.deltares.nl
intranet.deltares.nl
touch.deltares.nl
www.deltares.nl
dl-ng009.xtr.deltares.nl
www.deltares.nl
glossis.webservices.deltares.nl
acceptatie-intranet.deltares.nl
tl-ng042.xtr.deltares.nl
publicwiki.deltares.nl
modeldata-nhi-data.deltares.nl
opendap.deltares.nl
uaewqps.deltares.nl
tl-ng032.xtr.deltares.nl
al-ng025.xtr.deltares.nl
repos.deltares.nl
al-ng005.xtr.deltares.nl
aw-tc003.xtr.deltares.nl
uaewqps.deltares.nl
accounts.deltares.nl

Certificate

The complete raw certificate details for gds.avi.deltares.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ha1+wLU8VAMad7B/x0u
DLHoJifobaN3HVdmDI3K0mxSZQD1784n61SqAMwT5dvL/ujK0npWfy7TM3hzyscN
TXMRJU82ZS9/VNdH8cUbZtqPC8DXHCFtclavNcWccuDbE7PLpwa73+O3Roed/yCe
rZBomZqRBoYg8DSExoIEBbwK4sIe2rr1RtX1454mt1AzQzoTbomTvtqHxUajYIwS
g1agxCqMNx5SGovG++gu8D699HkxgtxznNiebB6hDjUY47a8xx0xVCZanjkKwxIv
RYz12n519hhmT19DiNYtiD36HL3EMae9PIWLxefQ4vFi71yKueIbnq97tmZAezi+
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 110783171744740239931351849331235713026
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Deltares'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gds.avi.deltares.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29850778479493823170640852776599281235851614812855078539459271231818765900881093622238313834157844683186404523479094072520942354454148436266746354810328056145756580780446539754166759782912180325746570406790956592485685801690015760121398234249874170128843616189220726580410297285314616751574481832250780524043911069432515664903069531443082198687033740770843942561486039111799536305760932602456508149727915359917955843257740786876988407275671595519131875406659557908570852727935697296853617626871595777859720931878101820634201087191027958384386232817691448330842816385062376903793924442695619821120875830577272408555259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7cded4c2b05f120d71088783d73b6a4f57fd394
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000186fed916eb0000040300483046022100ef5e8d6955abc0190dc06aca17612f9463a951c3c1b78b6f9cc769264588dac3022100c6dffa51c865a3ae5d3015c0b17c91f4cf8de3719f2c8db3b2b869efb5ec6cdc007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000186fed917470000040300483046022100d792bfc5c24671ca696088ddf75f4d7bc664bea10a0559c928e9de856fdc28d7022100aeac31186afe637028396ce4047a2b3a2aa6191555a5882f3bf79c31fa16cadc007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000186fed917590000040300473045022047148fe7d2f54893916040ecef77a2598c3ec892f180f35c6aa8ffc44b994a54022100c69f04d7e5e5e3bf18af93887c3404a76f212552dbfb6a7c02f6ef034a13634f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gds.avi.deltares.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueearthdata.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metoceanatlas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metoceanatlas.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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