gezondeschool.nl

- Rijksinstituut voor Volksgezondheid en Milieu (RIVM) -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 49:27:f9:3f:11:7f:e7:05:f1:24:8f:6f:48:00:12:ba was issued on by GEANT Vereniging.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Rijksinstituut voor Volksgezondheid en Milieu (RIVM)

Organization: Rijksinstituut voor Volksgezondheid en Milieu (RIVM)
State / Province: Utrecht
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 49:27:f9:3f:11:7f:e7:05:f1:24:8f:6f:48:00:12:ba
Serial Number (int): 97241198586563134386400794316659233466
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 2c:49:5c:ea:26:7c:a1:a7:26:ce:70:cc:3c:c9:4f:7a:00:34:64:70
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): c6:c4:09:3b:6d:a5:1a:b8:e1:56:f9:0e:49:6e:08:fa:94:d2:06:d8
Fingerprint (sha256): 2b:4f:79:88:64:10:10:d9:27:80:f0:b8:33:9a:78:4a:bc:2a:77:f2:93:51:18:bb:b8:30:39:be:e1:45:e2:b9

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate gezondeschool.nl

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gezondeschool.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gezondeschool.nl
sub.gezondeschool.nl
www.gezondeschool.nl

Other certificates including the domain name gezondeschool.nl

(limited to 100 certificates)
gezondeschool.nl
gezondeschool.nl
acceptatie.drupal.gezondeschool.nl
drupal.gezondeschool.nl
gezondeschool.nl

gezondeschool.nl
www.loketgezondleven.nl
test.gezondeschool.nl
acceptatie.drupal.gezondeschool.nl

gezondeschool.nl
acceptatie.drupal.gezondeschool.nl
www.loketgezondleven.nl
www.loketgezondleven.nl
test.gezondeschool.nl

Certificate

The complete raw certificate details for gezondeschool.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSWwuE6bMjuiA/QyMslK
wdhMUo7el0TT8X9ImHgH9AaFbywsYhUymlOhETzeEQaM6uZD1fiusQMnCjlMSOYL
J6iBXRR/T0fmuA6b34/bVKJ/C9VH8oFShog00kxtzfEPXBCBwyXZlb785tyWtwWq
naB9SannjBkJ/on4e6cw87r86oqn8uBlVcmnfhK0GrRhR5lFC3BHz5Ivqz1Q3ZRO
oP3cz2bwCLbwVJLQXM4U9XFsNo13zftjKOQ+K/90lTb6jY4s/BDU3qjvLWpNjQxZ
Nd4N80FbQgRRL3ICPl9UxonjdtgC+RQm75grQv6Pd57auKLPlDw1fJneBiWcBrAe
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 97241198586563134386400794316659233466
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utrecht'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rijksinstituut voor Volksgezondheid en Milieu (RIVM)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gezondeschool.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18323140005776574428964942248540503621820195607830182266238233817627248828510211744578481286028601186030726911733099652648900282479990748374465955156832346727319001471188826606953491565310351581743773380901895551259548701346308586042196507536722980691451722175567756646872461832310323798421271736695382273623455036050644038497471491269754462335982263998971234295807504133249380037501130989862081894285505356620339100773783422020723512361508418633632752984879623784379315689896805470114987721330750810256131496942723466757725891202034974101233765842499980427946657415355196912927584539626683467956939964842204548046443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c495cea267ca1a726ce70cc3cc94f7a00346470
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gezondeschool.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub.gezondeschool.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gezondeschool.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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