ecdacommunity.rsm.nl

- Erasmus Universiteit Rotterdam -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 09:57:30:f2:d9:cb:39:76:e1:f1:46:52:4f:d8:9b:33 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Erasmus Universiteit Rotterdam

Organization: Erasmus Universiteit Rotterdam
Locality: Rotterdam
Country: NL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 09:57:30:f2:d9:cb:39:76:e1:f1:46:52:4f:d8:9b:33
Serial Number (int): 12415774585037007032466309179371985715
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b5:60:f5:66:fa:44:3c:ae:d7:f9:f9:80:b3:6b:40:85:37:8d:46:c0
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): f3:56:53:a7:d6:8b:bf:79:d9:05:28:2e:d9:9f:c9:a8:f5:c2:95:54
Fingerprint (sha256): 1a:61:f2:57:f6:5e:b5:61:23:ea:e6:68:5c:f7:e6:0d:22:71:2e:c3:f4:56:32:47:77:74:5c:3f:51:24:f3:cb

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate ecdacommunity.rsm.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ecdacommunity.rsm.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ecdacommunity.rsm.nl

Other certificates including the domain name rsm.nl

(limited to 100 certificates)
decosjoin.rsm.nl
alumni.eur.nl
fin.rsm.nl
alumni.myrsm.nl
blog.rsm.nl
api-accept.rsm.nl
talktoastudent.rsm.nl
jobboard.rsm.nl
expertise-search-test.rsm.nl
landing.rsm.nl
jobboard.rsm.nl
www.store.rsm.nl
crm-prod.rsm.nl
store.rsm.nl
blackboard.rsm.nl
expertise-search.rsm.nl
iba-services.rsm.nl
jobboard-test.rsm.nl
iba-apply.rsm.nl
apply.rsm.nl
decostest.rsm.nl
webcast.rsm.nl
webcast.rsm.nl
www.store.rsm.nl
talktoastudent.rsm.nl
jobboard-test.rsm.nl
dilemma-game-test.rsm.nl
ww3.rsm.nl
api.rsm.nl
printmydoc.nl
landing.rsm.nl
eur-api-bundle-accept.service.eur.nl
ecdacommunity.rsm.nl
mailhog-test.rsm.nl
select.rsm.nl
iwill.rsm.nl
iwill.rsm.nl
ecdacommunity.rsm.nl
apply.rsm.nl
graduationplanner.rsm.nl
store.rsm.nl
media.rsm.nl
alumni.eur.nl
lateregistration-accept.rsm.nl
documents.rsm.nl
apply-exchange.rsm.nl
accept.intranet.rsm.nl
stash.rsm.nl
store.rsm.nl
dashboard-accept.imc.rsm.nl
dilemmagame-accept.rsm.nl
apply-test.rsm.nl
apply-accept.rsm.nl
crm-prod.rsm.nl
eur-api-bundle-test.service.eur.nl
decosjoin.rsm.nl
graduationplanner.rsm.nl
exchange.eur.nl
mailings.rsm.nl
store.rsm.nl
apply-exchange-test.rsm.nl
signature.rsm.nl
rsm.nl
mailings.rsm.nl
request-eb.rsm.nl
www.store.rsm.nl
store.rsm.nl
www.store.rsm.nl
adfs.rsm.nl
select.rsm.nl
api.rsm.nl
signature-test.rsm.nl
request-eb.rsm.nl
Dyn365lcm.rsm.nl
www.store.rsm.nl
landing.rsm.nl
dashboard-accept.rsm.nl
thinkdo.rsm.nl
rsmbv-web01.rsm.nl
publications.rsm.nl
expertise-search.rsm.nl
rsm.nl
webcast.rsm.nl
eur-api-bundle.service.eur.nl
top-test.rsm.nl
eur-api-bundle.service.eur.nl
printmydoc.nl
top.rsm.nl
jobboard.rsm.nl
lateregistration.rsm.nl
mailings.rsm.nl
expertise-search.rsm.nl
landing.rsm.nl
landing.rsm.nl
apply-exchange.rsm.nl
printmydoc.nl
expertise-search.rsm.nl
eur-api-bundle-accept.service.eur.nl
jobboard.rsm.nl
store.rsm.nl

Certificate

The complete raw certificate details for ecdacommunity.rsm.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12415774585037007032466309179371985715
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Erasmus Universiteit Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ecdacommunity.rsm.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 963550676940366094056616676416792551605877263716881160193472292516445203539522865401834296167310367448434642244795479417888365723788849004965517695369962579870477428570488624430364201969614433014991159060045415970107339816927049956548881132135565918286682826009595733567469819120871384858610810359810659837638407124833218125039155249532063451796871560797783396498093423520463787637806575920860465498961446838336663446647981481857972587406466848767338130548784472963521837000289776777352875118263364169160706789932832388732283648767824320174916865653677891499154550629445835468683632610401516126667181316781024843239932447052549368606565197823780226521569628743498831394135708393825714427167960708638845654969737984235624850901286216515130755205265316730265029126039706681748715144019208273402748091487159449493593600087520870522750555607719581608122197944892594108550176603264798132080927868724212995996990601841661301344436927153208370793596439228095349607566085268840986721983478604876369275195964894519711732896217703157848276100633667243994280137157102510105690134707745362455351253555783284687588910899216702993398742067116219757773607103121317227705791163832616496174834301116174575325807653940061265966201832096224442342245147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b560f566fa443caed7f9f980b36b4085378d46c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecdacommunity.rsm.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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