llm.univ-lyon3.fr

- Université Lyon 3 Jean Moulin -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 92:29:2e:62:c6:fd:7c:9f:93:d4:b3:79:ab:73:85:bb was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Université Lyon 3 Jean Moulin

Organization: Université Lyon 3 Jean Moulin
State / Province: Auvergne-Rhône-Alpes
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 92:29:2e:62:c6:fd:7c:9f:93:d4:b3:79:ab:73:85:bb
Serial Number (int): 194281112372583818445587511589614093755
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: bd:f2:29:a8:e8:59:f6:3a:61:6d:10:cf:3f:26:1e:4b:2b:dd:fd:75
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 41:43:b9:80:6a:6d:d2:9e:e4:c9:bb:38:0c:1c:11:a9:1b:53:2d:8c
Fingerprint (sha256): 1b:db:77:74:19:6d:da:e0:99:a8:61:7e:ef:29:4f:2f:58:15:83:a2:c1:07:3e:1f:7b:bd:47:fd:57:06:f9:98

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate llm.univ-lyon3.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for llm.univ-lyon3.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

llm.univ-lyon3.fr
www.llm.univ-lyon3.fr

Other certificates including the domain name univ-lyon3.fr

(limited to 100 certificates)
sfbconf.univ-lyon3.fr
portail-vacataires-ens-consult.univ-lyon3.fr
vsp-quai-chev.univ-lyon3.fr
nextcloud-preprod.univ-lyon3.fr
parefeu-master-ipmi.univ-lyon3.fr
sondage.univ-lyon3.fr
evenements.univ-lyon3.fr
webtv.univ-lyon3.fr
web2.univ-lyon3.fr
webmail.univ-lyon3.fr
mail.univ-lyon3.fr
haproxy-pp.univ-lyon3.fr
webinscription.univ-lyon3.fr
ged.univ-lyon3.fr
psc.univ-lyon3.fr
superview.univ-lyon3.fr
pop.univ-lyon3.fr
vsp-manu-b4-haut.univ-lyon3.fr
webscolarite.univ-lyon3.fr
vsp-manu-b4-haut.univ-lyon3.fr
impression.univ-lyon3.fr
mahara.univ-lyon3.fr
webmail.univ-lyon3.fr
vdi.univ-lyon3.fr
fdv-srv.univ-lyon3.fr
llm.univ-lyon3.fr
netmanager.univ-lyon3.fr
esrs.univ-lyon3.fr
iaedt.univ-lyon3.fr
applications.univ-lyon3.fr
vsp-quai-chev.univ-lyon3.fr
adfs.ad.univ-lyon3.fr
ecandidat.univ-lyon3.fr
adfs.ad.univ-lyon3.fr
web2.univ-lyon3.fr
revues.univ-lyon3.fr
kanboard.univ-lyon3.fr
hra-for.univ-lyon3.fr
mahara.univ-lyon3.fr
applications.univ-lyon3.fr
boutique.univ-lyon3.fr
catalogue.univ-lyon3.fr
vsp-manu-b6-bas.univ-lyon3.fr
www.univ-lyon3.fr
idptest.univ-lyon3.fr
css03.univ-lyon3.fr
eduspot2.univ-lyon3.fr
autodiscover.univ-lyon3.fr
llm.univ-lyon3.fr
impression-pers.univ-lyon3.fr
choisirsonsport.univ-lyon3.fr
idp.univ-lyon3.fr
vsp-manu-b6-haut.univ-lyon3.fr
ligeo-gestion.univ-lyon3.fr
webelection.univ-lyon3.fr
esrs.univ-lyon3.fr
candidat-ens-chercheur.univ-lyon3.fr
oa.univ-lyon3.fr
webmail.univ-lyon3.fr
cervoprint2.univ-lyon3.fr
questionrep.univ-lyon3.fr
veeam.ad.univ-lyon3.fr
webtv.univ-lyon3.fr
cas.univ-lyon3.fr
moodle.univ-lyon3.fr
prel.univ-lyon3.fr
applications.univ-lyon3.fr
glpi.univ-lyon3.fr
impression.univ-lyon3.fr
imptest-pers.univ-lyon3.fr
owncloud.univ-lyon3.fr
survey.univ-lyon3.fr
piwik.univ-lyon3.fr
piwik.univ-lyon3.fr
vsp-quai-huvelin.univ-lyon3.fr
boutique.univ-lyon3.fr
atelier-artistique.univ-lyon3.fr
indicateurs-preprod.univ-lyon3.fr
cervoprint.univ-lyon3.fr
docker-registry.univ-lyon3.fr
acces-distant.univ-lyon3.fr
eas.univ-lyon3.fr
cadeaunoel.univ-lyon3.fr
idp.univ-lyon3.fr
moodle.univ-lyon3.fr
moodle.univ-lyon3.fr
imap.univ-lyon3.fr
bo.univ-lyon3.fr
impression-adm-ens.univ-lyon3.fr
edseg.univ-lyon3.fr
ezscd.univ-lyon3.fr
webmail.univ-lyon3.fr
scd-resnum.univ-lyon3.fr
clic.univ-lyon3.fr
imap.univ-lyon3.fr
mediatheque.univ-lyon3.fr
cervoprint2.univ-lyon3.fr
pop.univ-lyon3.fr
parefeu.univ-lyon3.fr
cerebro.univ-lyon3.fr

Certificate

The complete raw certificate details for llm.univ-lyon3.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 194281112372583818445587511589614093755
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auvergne-Rhône-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Université Lyon 3 Jean Moulin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'llm.univ-lyon3.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 939894868268381807824665570864695456588747559717930580857066816066661728268477733664002938208924561467563363006312457860355337088630886079435877316442670924037965618122583001873014580285958243203317576422283406075567601954030894260308387618436997611132109655834492215207013156313944186009640445625466175119659781205278384148989682428320319037445054743944055221983843229588827621586268274863286382711999487183524677985500257303612058964863655717133399043343189256274206506674523180457125255102164626116552011658285324774728383163058225443363829279876414264482784518785970180348155101593569630553429988580827340667811476130351242684292985092705504198497537357141162873177612741942653546106249302257181513908354675820318505232929745332206716151759979412841431938406839679176147556906019386433179452335617539520355783829951393179039744702985487793535647584483051721479885483384514871150906232646485648440700878549880097989917978559716383153335386029931727729165729221855965797859107036755128430207877114080816085209324175152239767640746043225398214543606636169353158452844726493271085336365851749114699182638742309734032623745583118565072416722875666589657862380734024489949213293137199513145862642460611294181972631756857654979619719701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bdf229a8e859f63a616d10cf3f261e4b2bddfd75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llm.univ-lyon3.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.llm.univ-lyon3.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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