OV SSL/TLS Certificate for online.novaims.unl.pt Issued to Universidade Nova de Lisboa

Certificate is witin its validity period

Issued by GEANT Vereniging (GEANT OV RSA CA 4)

About the online.novaims.unl.pt OV SSL/TLS Certificate

This certificate with serial number 09:22:b2:1b:07:00:3d:38:ec:03:35:72:6c:73:05:ab for online.novaims.unl.pt was issued on by GEANT Vereniging.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for online.novaims.unl.pt provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 09:22:b2:1b:07:00:3d:38:ec:03:35:72:6c:73:05:ab
Serial Number (int): 12143202465490949061105912094741693867
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: 05:7a:56:9e:d4:1f:83:f7:52:52:a8:06:ea:c5:50:fe:22:f6:1d:61
Authority Key Identifier: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (SHA-1): d0:2b:0a:24:cd:8b:bb:65:d6:ea:36:f6:05:b7:17:e6:25:d9:d1:a5
Fingerprint (SHA-256): 7e:d6:b7:ca:95:13:e3:10:1d:0f:c8:30:0e:5d:26:fa:21:c7:0a:e7:b5:de:b0:22:2d:16:4f:9c:5b:4c:83:3a

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation Information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate online.novaims.unl.pt
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for online.novaims.unl.pt

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for online.novaims.unl.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcRZHmh9t5ePJh36gNn0
pJHnypB65m9jcidD77v5pWCryv6HKurUugUnvu9AyoU7jOkJDnhOGcy1sPrXI4Vl
UlzR0coTlYWzacLv6NJFefvQI8t+BnwjKOtXSEdFc2IqwCGjzzRZripCRCrQFsJF
M3V93/O+5+js+GeQNrhI+mAvN3t/oYcz5MLRmvF8tCt2Cf4AomtgoERhdJFXE4sU
SGsgsDDwnvrv8LLlKzbVOMRLk4j4nVwINfVoeafUo53Yn8m91RfIm2+F7jJ3vZs9
bkcUjxFMUYzTFOcEFV42QirBHinE4fbjBNE1egt4swvvNDdcgCCyiK1i4CJ76X1p
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12143202465490949061105912094741693867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-12-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lisboa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universidade Nova de Lisboa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'online.novaims.unl.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18906330306671640755352952588853053611638219106613237733881704500615035679391615980829071794307695636651288046263115497527512270413108802196504305554049552687175636999169085650047027668155958418493525491597709257654048169718655573928040271077612650483141053929696901901817664872368928119489895662909872976749577743422000091605556274503036732813457854959683238697111673673829849269943826393815448412907228461284509518626924173064288586476369482936448434054272184689065014095613414674949892544284241458381496481032926521834213497563221493055395621036860046287345566206932360933852499267029769070503076275683057039403427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							057a569ed41f83f75252a806eac550fe22f61d61
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.novaims.unl.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.online.novaims.unl.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		002d590db348e1913cfda6f8527964d036ba57ad3e0bd2eae4b1bc619e8e3106fbc0fef33a4c7dda01ec1ac55b959c0a8f4b8a7dc913bcee9adc5850d776c2483c7c4f0ceb7cd83a3fff638fdc9aafe8a0ed2267e8c67a9753bdf9936993cd520f64b44752376b628df6836e54f4ed12d3017249b603efad160aae29523c3602afbb8c15d68048783f61a4b81c568a197d3c575ed8d34bdc3b3d3afc1fb627cf2c090197edced0eabbf73e82b297f77ac536998f13d5b146599d62d0b64b29cd50ba1359605524a6f5bc7fcb789cf48093d2e48af8794d0a1dba52575763001a97745a887c119d5514f613f2beeaa69f47a6d2ce833f2b54213ac16112b60b21b14b510872f85457a2689d8ef84502db9ad862347380fafa9fdfe5b37f7339f53177237ac937dcf9caae7d0d4efb643f8c339a46e84a183bfa7a061d1afb8b918b8569595ebe7b265557ff38faa510de6462aa5beb4d2c9515018641a05f63c978ba1812d091be10be7968870472cddde654efced6c3942e55a5f29f28c9cd7f8d16a6d7e023662135139125f028661d9242d256adb6bedf4ae6f1e7c6ea130cb198c686647d8e8254dea2df9bc34f0de923196682f77e3510221e425308c86af9eab908c9f133d5565b65bcbb7b3b19a75ce6131666fafd80a3bda80493ff57c8009c1579dab98a5a20fcb1ee725e4e90849eb8a1cd73f826fbd6623c4a9f0024