www.truni.sk

- Trnavská univerzita v Trnave -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number d8:bf:5d:87:b8:6d:8b:3d:58:fe:b7:34:d5:d6:5c:48 was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Trnavská univerzita v Trnave

Organization: Trnavská univerzita v Trnave
State / Province: Trnavský kraj
Country: SK

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): d8:bf:5d:87:b8:6d:8b:3d:58:fe:b7:34:d5:d6:5c:48
Serial Number (int): 288106872806494731917377411001584344136
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: af:cf:ee:e4:92:85:c6:90:de:49:0c:d2:ad:73:13:69:8b:27:c5:94
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): d4:20:4a:01:5d:4a:ec:a3:b1:87:21:64:5a:24:65:9a:c3:b0:a2:50
Fingerprint (sha256): 21:c8:bf:65:7a:36:9b:67:87:f4:c7:5c:4e:bf:2f:0f:ce:b5:94:ba:8d:7a:1b:08:0c:c8:39:18:c2:c0:9a:e2

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.truni.sk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.truni.sk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.truni.sk

Other certificates including the domain name truni.sk

(limited to 100 certificates)
webmail.truni.sk
webmail.tvu.sk
www.truni.sk
idmportal.truni.sk
wap.truni.sk
webmail.truni.sk
meteo.truni.sk
pdf.truni.sk
strava.truni.sk
indukcia.truni.sk
www.truni.sk
ezp.truni.sk
sts.truni.sk
ff.truni.sk
www.truni.sk
sibidp.truni.sk
meteo.truni.sk
vpn.truni.sk
pdf.truni.sk
shib-idp.truni.sk
rlgc.truni.sk
strava.truni.sk
moodle.truni.sk
webmail.tvu.sk
www.truni.sk
strava.truni.sk
strava.truni.sk
connect.truni.sk
rdgateway.truni.sk
radius2.truni.sk
esmc.truni.sk
strava.truni.sk
strava.truni.sk
ezp.truni.sk
strava.truni.sk
www.truni.sk
eshop.truni.sk
sts.truni.sk
mais.truni.sk
3point.truni.sk
idmportal.truni.sk
radius1.truni.sk
fzsp.truni.sk
mais.truni.sk
www.truni.sk
moodletest.truni.sk
mais.truni.sk
rlgc.truni.sk
student.truni.sk
kybez.truni.sk
3point.truni.sk
webmail.truni.sk
ezp.truni.sk
sip.truni.sk
fmc.truni.sk
mais.truni.sk
remlabgrab.truni.sk
idmportal.truni.sk
rdweb.truni.sk
webmail.tvu.sk
idmportal.truni.sk
rdweb.truni.sk
indukcia.truni.sk
skype.truni.sk
pf.truni.sk
kybez.truni.sk
moodle.truni.sk
webmail.truni.sk

Certificate

The complete raw certificate details for www.truni.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QQ4bXxfQsx2FPvndPg6
SvQ7YW5EoK81ED6Rj71AEjrzu6r9Oiz3oWxzu+nTrz8n4w/eJvXInf5ActdGMSsC
yYCG/GYvH04daB+sEk7KwJOY18F5K+Gwa4WrfGmtYEXPegMpbkh1cAqGiu7nLcmG
76r+zD2heMESVE36fIrr5Aoa0uWcRmQxhNSMOufkFtQvbe3TRILtrv171SnygQnS
ARyfs3V9gmdUIqgsuWsstF8RG3c021qW2CmJwZVpC2SJow36BSwh74mSiIZg3750
mxxCysJZQnIxiPVE7Zt62C+rdwzzVy2PxUhfxCjzBAnsk/LGftrd7q3zEV8YP2SH
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288106872806494731917377411001584344136
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trnavský kraj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trnavská univerzita v Trnave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.truni.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27395793344609172092770152435471768184669024284631849631831721933238503650410344042738866128222431190853464964259651080538430286846632391401703242307214749395231583075734433621279724260565174805022901954707732246432364659503134964804114167544381882605950084222205469492629716475959860370977697171049002901349414552822620161500295203219272353902158758624160773812786161809569676404753041788664746248030678012622597423130596302926966290623597832613565719142302148872952671660650967522390368299441609764847472359887378224809029798591417252771266982793988083369607478597141262601129632778298892066398124725963429985421243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							afcfeee49285c690de490cd2ad7313698b27c594
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truni.sk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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