av.sh.se

- Södertörns högskola -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 05:e3:dc:5c:7c:9d:68:12:04:13:fa:0c:a0:74:93:d1 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Södertörns högskola

Organization: Södertörns högskola
Locality: Huddinge
Country: SE

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 05:e3:dc:5c:7c:9d:68:12:04:13:fa:0c:a0:74:93:d1
Serial Number (int): 7829260823482173945983535374484673489
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ff:e5:52:08:53:70:a8:14:b1:e2:d8:2a:ca:5c:fd:32:dd:1b:69:da
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 4b:c2:51:22:c4:d3:c6:c6:b5:29:07:9c:5e:09:71:f4:31:c0:a8:80
Fingerprint (sha256): 1e:c1:e7:58:b4:b0:d6:61:ab:be:52:3d:57:28:c5:02:40:db:94:82:cc:30:54:f5:0b:59:6f:bc:2f:f3:d0:ca

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate av.sh.se

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for av.sh.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

av.sh.se

Other certificates including the domain name sh.se

(limited to 100 certificates)
www.sh.se
ssd04.web.sh.se
graduateland.com
webappl.web.sh.se
*.till.biblextern.sh.se
bibl.sh.se
usersync.errai.sh.se
earkiv.sh.se
graduateland.com
rad1.eduroam.sh.se
*.bibl.sh.se
api.bibl.sh.se
graduateland.com
careergate.sh.se
careerland.dk
careergate.sh.se
play.sh.se
graduateland.com
webappo.web.sh.se
dubhe.suni.se
support.mi.sh.se
primula.sh.se
graduateland.com
graduateland.com
graduateland.com
graduateland.com
mob01.web.sh.se
av.sh.se
spk03.web.sh.se
graduateland.com
*.bibl.sh.se
kvalitet.sh.se
ssd02.web.sh.se
career.cphbusiness.dk
graduateland.com
career.cphbusiness.dk
primula.sh.se
career.cphbusiness.dk
*.till.biblextern.sh.se
api.sh.se
blogg.sh.se
career.cphbusiness.dk
graduateland.com
terebellum.suni.se
www.sh.se
career.cphbusiness.dk
careerland.dk
graduateland.com
primula.sh.se
*.bibl.sh.se
blogg.sh.se
career.cphbusiness.dk
bibl.sh.se
api.sh.se
careerland.dk
dubhe.suni.se
primula.sh.se
career.cphbusiness.dk
career.cphbusiness.dk
info.web.sh.se
apputv.sh.se
www.sh.se
itsl.bibl.sh.se
bibl.sh.se
api.sh.se
kronox-test.sh.se
student.web.sh.se
bibl-app.sh.se
*.till.biblextern.sh.se
graduateland.com
app.sh.se
rad2.eduroam.sh.se
careerland.dk
career.cphbusiness.dk
webappl.web.sh.se
apptest.sh.se
*.bibl.sh.se
www.sh.se
*.mi.sh.se
faktaassistenten.sh.se
faktaassistenten.sh.se
careergate.sh.se
www.sh.se
dubhe.suni.se
blogg.sh.se
itsl.bibl.sh.se
sim01.web.sh.se
apptest.sh.se
career.cphbusiness.dk
career.cphbusiness.dk
www.sh.se
graduateland.com
blogg.sh.se
*.web.sh.se
www.sh.se
bibl.sh.se
bibl.sh.se
api.sh.se
faktaassistenten.sh.se
student.mi.sh.se

Certificate

The complete raw certificate details for av.sh.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7829260823482173945983535374484673489
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Huddinge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Södertörns högskola'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'av.sh.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 740736197896944424258511590718965023063665357620244034443908775810916305333827382219116621551613665252746870679243195042253225046267727772955013924860345156982064438714756280445533766711747295355745988421923072578826101168610893958625569415120747049374712467723846643994709845162991552217536456489438070575826740808562653374225611546403343572234146556593176398333034762933491607739964890677387598166617886146840051602330725965093635757144801913703671535623975382261194041906354917916032895579626977585262220997150712964682850741461995677243758332643678708260504480330280316624563120182040376999749914677947007338241868933155634114737369169292078620258508241215312134958053856861771697286461906165867845626302812725208792903661773097766254417379220850900882048649344748993052705274581488396323899383215488407363808478926923144000663090509936478826695614448689037975693876840398642545734228201020738665453011272618238004982720016799119896129541724290995394216119467544392917329432458958465271524152260085623516983240432627140118210317304987475411533641321735385574697666208379517642727741428278813551717744955984030530690162092102407102211664357461395190372116043527687203718227632759546970358072529771391065779493314636020793490569327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ffe552085370a814b1e2d82aca5cfd32dd1b69da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'av.sh.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0051e79115a98c1a136b262b9ce178a29849a787e7eeebccd5d3ae4853dd142544f2538b128497fafdf29acef3bdd905b618b8b40a28968273f42155f23dce67ba1e029ab4f12c434c5685a95aa6a02a902ad506d842e020d05e33d8484dc6ae61a5f004cd3de6805099f39df0babcea87bbb9ef7a9a59c96916efe2386ceef3c9ec15f5ab4b71087bab17bdef903b033de8b03753aca5dbe54354e51d8032b6a3ec15cdf241f42f62b148dcec991a9846a35b863ba0610d80fc35991f9170d4dd21c7a3f7d5dcdaee8d67f254bc3d5b5f75c70bde25d59a4a1bd8bb3ea92f7f4b9ab89c9088265ba03622b88f1e11829f61b6764f6417d8a2b4ff13b629ec37e5