timetable.ait.ie

- Athlone Institute of Technology -

Issued by GEANT eScience SSL CA 4

About this certificate

This digital certificate with serial number cf:d5:bd:ac:fe:dd:71:31:8d:81:2b:4f:13:e6:bb:18 was issued on by GEANT Vereniging.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Athlone Institute of Technology

Organization: Athlone Institute of Technology
State / Province: Westmeath
Country: IE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): cf:d5:bd:ac:fe:dd:71:31:8d:81:2b:4f:13:e6:bb:18
Serial Number (int): 276260001439881446237397232351569165080
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 74:f7:17:01:0b:1c:8c:18:46:7f:30:ec:50:bf:63:fc:08:27:05:0f
AuthorityKeyId: 9a:2b:8a:22:d6:8d:0c:c0:2a:a5:6f:64:33:3f:96:60:67:15:1d:b2

Fingerprint (sha1): a1:bb:ff:cf:42:37:a8:fd:7e:3d:cc:58:40:a7:19:21:28:21:52:53
Fingerprint (sha256): 25:14:25:65:04:28:20:20:4a:1d:ca:33:9d:ee:84:0c:50:3e:c7:07:18:fb:6f:69:61:44:ed:e4:1c:3d:be:85

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTeScienceSSLCA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTeScienceSSLCA4.crl

Check the revocation status for certificate timetable.ait.ie

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for timetable.ait.ie

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

timetable.ait.ie

Other certificates including the domain name ait.ie

(limited to 100 certificates)
www.mri.ait.ie
mail.ait.ie
collaboration.ait.ie
modmgrtest.ait.ie
sip.ait.ie
elearning.ait.ie
mail.ait.ie
inplace.ait.ie
autodiscover.ait.ie
*.elearning.ait.ie
libmain.ait.ie
mail.ait.ie

timetable.ait.ie
inplacedev.ait.ie
cpd.ait.ie
library.ait.ie
elearning2014.ait.ie
edocs.ait.ie
elearning.ait.ie
forti.ait.ie
libsearch.ait.ie
eduroam.ait.ie
elearning.ait.ie
www.ait.ie
owa.ait.ie
modmgr.ait.ie
aitstage.ait.ie
idp.ait.ie
apps.ait.ie
vlablive.ait.ie
elearning2015.ait.ie
mail.ait.ie
www.bri.ait.ie
ammt.ait.ie
ait.ie
aitmoodle.ait.ie
adfs.ait.ie
timetable.ait.ie
sri.ait.ie
stu-projects.ait.ie
timetable.ait.ie
elearning.ait.ie
libmain.ait.ie
amm.ait.ie
aitcard.ait.ie
libmain.ait.ie
apps.ait.ie
forti.ait.ie
vlab.ait.ie
onlineexams.ait.ie
mail.ait.ie
extranet.ait.ie
*.ezproxy.ait.ie
AN CHEIM COMPUTER SERVICES
aitmoodle.ait.ie
careers.ait.ie
weblive.ait.ie
tus.ie
elearningm2.ait.ie
libmain.ait.ie
weblive.ait.ie
aitv-bol-f1.staffnet.ait.ie
jobfair.lu
vlab.ait.ie

jobfair.lu
moodlenew.ait.ie
elearning.ait.ie
www.ait.ie
fs.ait.ie
mail.ait.ie
*.ait.ie
fortianalyzer.ait.ie
idp.ait.ie
aitmoodle2019.ait.ie
aitcard.ait.ie
www.ait.ie
vlablive.ait.ie
2019.elearning.ait.ie
www.ait.ie
2019.elearning.ait.ie
www.ait.ie
www.ait.ie
AN CHEIM COMPUTER SERVICES
careers.ait.ie
aitcard.ait.ie
AITP-EDUROAM-A2.ait.ie
fs.ait.ie
jobfair.lu
modmgr.ait.ie
helpdesk.ait.ie
idp.ait.ie
aitcard.ait.ie
2019.elearning.ait.ie
tus.ie
idp.ait.ie
fs.ait.ie
helpdesk.ait.ie
elearning.ait.ie

Certificate

The complete raw certificate details for timetable.ait.ie in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKq6WQ17/tm8ODCx4A8T
4Ty8WE/GMXAhf5+D1U8ZOyRQs8Y7FUctUaWMvPaDePb1OIeRfy2Jab+zxeAZQqJF
7MpgbOmQWhIrtdWXTOHCNdVoux/JJsdSJkW3o5sm185BC8AUIyALUrQWle2qTiOg
56HzyiDmO25JnC4cwOOaFJliuEB8m3wWNv1xaL7de1J63e/0dYWhTopF3obov96I
ZtKH7MlvIlZVVfyBy8LNEy/2bNGeWSeCEX9FQxfrUAWVQXpbE5XQ/UU+vQMWNJik
6Ts1lzWvZVT3m4YDpV1lZQC/jQJpgWQRNGNVWxj5XoFlyXzPBvKRoSJK63aMsbnt
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276260001439881446237397232351569165080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT eScience SSL CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'org'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'terena'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'tcs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Westmeath'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Athlone Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'timetable.ait.ie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22302130749806902650529388210949051924030066894708560290992023141347123387729264642621691583444108265798093368571086845081020297648698505926302630755644731065554327422258442230443620342108848357688965988444990297865969959297394363709496315927162797962508015095585086637995037671690472306303583358327786038455992001351514613459496865706747609795471001451610536042678448333734736683797992530360530397965888657879521416903879940137749020462198092970134522833275653216945234439902425316349190719830726619932970929723218835822580728689381198129867420305067813401294883097147801274496281151338634228265061630300202758434113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9a2b8a22d68d0cc02aa56f64333f966067151db2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74f717010b1c8c18467f30ec50bf63fc0827050f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.3.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.3.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTeScienceSSLCA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTeScienceSSLCA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timetable.ait.ie'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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