netadm.i2.dk

Issued by TERENA SSL CA 2

About this certificate

This digital certificate with serial number a6:7f:4d:f3:61:71:64:71:a6:d2:f5:19:cf:77:3e:dd was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=netadm.i2.dk,OU=Domain Control Validated

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): a6:7f:4d:f3:61:71:64:71:a6:d2:f5:19:cf:77:3e:dd
Serial Number (int): 221312850029470059059150256113232330461
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9a:97:92:25:d3:e6:7a:a7:84:47:35:57:e3:74:cb:7b:9b:92:0d:7e
AuthorityKeyId: 5b:d0:8a:1c:9a:32:5b:e0:b5:dd:96:54:1b:e1:86:28:b0:fd:b6:bd

Fingerprint (sha1): ff:06:b7:ec:cc:87:91:63:af:2a:cf:31:41:d4:b7:9c:1d:cb:61:de
Fingerprint (sha256): 2b:22:53:69:38:e7:d5:75:61:2a:55:92:ad:f2:28:16:65:50:73:21:1f:a7:49:cb:9a:6d:2a:a0:e9:56:83:28

Issuing Certificate URL: http://crt.usertrust.com/TERENASSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TERENASSLCA2.crl

Check the revocation status for certificate netadm.i2.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for netadm.i2.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

netadm.i2.dk

Other certificates including the domain name i2.dk

(limited to 100 certificates)

Certificate

The complete raw certificate details for netadm.i2.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 221312850029470059059150256113232330461
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'netadm.i2.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 851543198681359155204383534127409612431593315245007036982447176804673481683305771799553998540333137785402826452045061693195400628353131500401150447032342932908314040758555962675899429131766551317848741906230340950203601899314032277370067599469995424761555112732404541348584957333124140317160762286023277323660818867028218343456562955710786713521453248745328828674270074706136949911021337765417818230615569838022818913560725979633886772892303480235970483362439373851510357712248097300578915384368756161793075087779228070642228083163416533044456263422865564378994836849844247632252971857534213954103351024760059308203980934325215557070705066001205507091592783682598686590211665297536318792294153917400071757389192462441342770616299435868166582921029270756152006136161056821127881607714514716835629020539746753149941365921481222982552865337368646309037277572756231926628642281458142198367565462093967559404997880891860460441200819300688508902069300301279886495778089475623307318970111107203565360316061673673243402782513661010178588163353044927503329333677254609214411059442814069976722642413645127740837638197678779634776200130336316689843995772790461268541263914455879945477688068511331456733458597650898015608533169600559324906558261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5bd08a1c9a325be0b5dd96541be18628b0fdb6bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a979225d3e67aa784473557e374cb7b9b920d7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TERENASSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TERENASSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netadm.i2.dk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003e4586142ff36d266aec15224715dfd6d0681b172d63b1fb54e6f12daca84c919f1e617ce3df45791d535e3806edd4a0b7ae29fb197b596d8cdc7902e23cd868bc382e85a7baa9f58d11c9c13d67d1838a3e2745848c38a6e6f4dc4642a5fdb074e13789881ee7ab198caa881c64d7cd430b0f98cf6f9d20dfd072774cc0a0a52250aa8a0cee52230e6786c317e942eacc17058c3ff0de454de4ea4d96cd570f88f42cb696cfbffc3c3cd8dab2a92b0a94db7a74a6af696197677b1665c7056e16cbbaa113d0272a3cfa0dcbdd62dac4b6433f5e0529702e0b44c14fe2f33554a8132d6adb6a0b1b0924dcb5a95865dc16459e5abab1f5d690747c7a04d97970