crm-prod.rsm.nl

Issued by TERENA SSL CA

About this certificate

This digital certificate with serial number cf:c5:3e:ef:bb:4e:fc:6f:bd:99:11:eb:fe:67:35:77 was issued on by TERENA.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=crm-prod.rsm.nl,OU=Domain Control Validated

TERENA

Organization: TERENA
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): cf:c5:3e:ef:bb:4e:fc:6f:bd:99:11:eb:fe:67:35:77
Serial Number (int): 276174354111504399194777253750875043191
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a0:3c:00:5d:11:c4:bf:e9:5e:74:db:be:b5:61:f9:cd:06:4a:46:a3
AuthorityKeyId: 0c:bd:93:68:0c:f3:de:ab:a3:49:6b:2b:37:57:47:ea:90:e3:b9:ed

Fingerprint (sha1): 29:6e:99:46:d1:f4:ca:9c:4f:74:58:c1:83:0a:dc:d9:99:47:3e:57
Fingerprint (sha256): 25:e5:4d:85:75:c1:9a:71:90:9f:64:17:ae:7e:c7:a6:5e:33:a5:dd:a2:55:46:dd:ba:c3:9f:f8:87:21:05:a0

Issuing Certificate URL: http://crt.tcs.terena.org/TERENASSLCA.crt

Revocation information

OCSP Server: http://ocsp.tcs.terena.org
CRL Distribution Point: http://crl.tcs.terena.org/TERENASSLCA.crl

Check the revocation status for certificate crm-prod.rsm.nl

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crm-prod.rsm.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crm-prod.rsm.nl
auth-acc.rsm.nl
auth-prod.rsm.nl
auth-test.rsm.nl
crm-acc.rsm.nl
crm-test.rsm.nl
sts-acc.rsm.nl
sts-prod.rsm.nl
sts-test.rsm.nl

Other certificates including the domain name rsm.nl

(limited to 100 certificates)
decosjoin.rsm.nl
alumni.eur.nl
fin.rsm.nl
alumni.myrsm.nl
blog.rsm.nl
api-accept.rsm.nl
talktoastudent.rsm.nl
jobboard.rsm.nl
expertise-search-test.rsm.nl
landing.rsm.nl
jobboard.rsm.nl
www.store.rsm.nl
crm-prod.rsm.nl
store.rsm.nl
blackboard.rsm.nl
expertise-search.rsm.nl
iba-services.rsm.nl
jobboard-test.rsm.nl
iba-apply.rsm.nl
apply.rsm.nl
decostest.rsm.nl
webcast.rsm.nl
webcast.rsm.nl
www.store.rsm.nl
talktoastudent.rsm.nl
jobboard-test.rsm.nl
dilemma-game-test.rsm.nl
ww3.rsm.nl
api.rsm.nl
printmydoc.nl
landing.rsm.nl
eur-api-bundle-accept.service.eur.nl
ecdacommunity.rsm.nl
mailhog-test.rsm.nl
select.rsm.nl
iwill.rsm.nl
iwill.rsm.nl
ecdacommunity.rsm.nl
apply.rsm.nl
graduationplanner.rsm.nl
store.rsm.nl
media.rsm.nl
alumni.eur.nl
lateregistration-accept.rsm.nl
documents.rsm.nl
apply-exchange.rsm.nl
accept.intranet.rsm.nl
stash.rsm.nl
store.rsm.nl
dashboard-accept.imc.rsm.nl
dilemmagame-accept.rsm.nl
apply-test.rsm.nl
apply-accept.rsm.nl
crm-prod.rsm.nl
eur-api-bundle-test.service.eur.nl
decosjoin.rsm.nl
graduationplanner.rsm.nl
exchange.eur.nl
mailings.rsm.nl
store.rsm.nl
apply-exchange-test.rsm.nl
signature.rsm.nl
rsm.nl
mailings.rsm.nl
request-eb.rsm.nl
www.store.rsm.nl
store.rsm.nl
www.store.rsm.nl
adfs.rsm.nl
select.rsm.nl
api.rsm.nl
signature-test.rsm.nl
request-eb.rsm.nl
Dyn365lcm.rsm.nl
www.store.rsm.nl
landing.rsm.nl
dashboard-accept.rsm.nl
thinkdo.rsm.nl
rsmbv-web01.rsm.nl
publications.rsm.nl
expertise-search.rsm.nl
rsm.nl
webcast.rsm.nl
eur-api-bundle.service.eur.nl
top-test.rsm.nl
eur-api-bundle.service.eur.nl
printmydoc.nl
top.rsm.nl
jobboard.rsm.nl
lateregistration.rsm.nl
mailings.rsm.nl
expertise-search.rsm.nl
landing.rsm.nl
landing.rsm.nl
apply-exchange.rsm.nl
printmydoc.nl
expertise-search.rsm.nl
eur-api-bundle-accept.service.eur.nl
jobboard.rsm.nl
store.rsm.nl

Certificate

The complete raw certificate details for crm-prod.rsm.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdFL5C9ksMtZAf1+/PsT
WP9o+GiKmp8+YgTL9tBwL3cHEgCJqKh4ju3UswDdnb2tkiBrMrWsV4pn/J+ol1hz
ToK0KKxk6V0STU0vJjZ2pAfksS9vGZT+Om9JDiiKj2u+5jGWORP2WupelVDmmIPy
4e/rmRItiI7ehJM8aXCmelX1KAVdodmGFhgZweMTMFEM9tkc+Rb0Ip1rcCVL6Uo+
j1zTYcvWP6yRZgUd1g6Jbx1N5TR0HT0or2rB0ML1V+HpUefECM/6/FchBF7/cjEm
+AQ1KZ24wb8jsqLA9zJE6huGWwbf7/7xuJh5XQVB9uPNgTbIW/RgjjrDolV9sgU+
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276174354111504399194777253750875043191
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crm-prod.rsm.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19417668586199454298751003514265390595269015278067213427717981937473315814884151263413236422060021187644980558352451537831942774507604657765479899638608371248451421088902281581916083151976581911956337014769412787332699078257534278582315755099751718108656328880406364878467045585969964258919941225656294720805632808409804704327670329349135277667502741124021782963007378935320516136707987264564382178766466696521420241120142135084729366494987086521453170506191431987452946781805648583766624799316305642896620858986679689972139522236442228991607526013118580760730225195634671217389168358567047585259118992692402614255213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cbd93680cf3deaba3496b2b375747ea90e3b9ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a03c005d11c4bfe95e74dbbeb561f9cd064a46a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.tcs.terena.org/TERENASSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.tcs.terena.org/TERENASSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tcs.terena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (156 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm-prod.rsm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-acc.rsm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-prod.rsm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-test.rsm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm-acc.rsm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm-test.rsm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts-acc.rsm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts-prod.rsm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts-test.rsm.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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