*.universite-paris-saclay.fr

- UNIVERSITE PARIS-SACLAY -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 62:04:b6:c1:91:fb:0c:c7:1a:35:34:74:79:8d:78:e4 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UNIVERSITE PARIS-SACLAY

Organization: UNIVERSITE PARIS-SACLAY
State / Province: Île-de-France
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 62:04:b6:c1:91:fb:0c:c7:1a:35:34:74:79:8d:78:e4
Serial Number (int): 130288819509117951858128173132006914276
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: db:1e:af:e7:01:68:8d:14:0b:a7:2b:ae:02:35:11:38:c3:ac:ca:31
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 62:57:a4:f0:80:81:cf:27:42:e6:70:e5:e4:8d:1a:79:26:83:ba:eb
Fingerprint (sha256): 2b:69:7e:de:ad:1f:cc:27:05:37:12:04:02:f3:3e:a6:3c:4c:88:76:3d:2e:5d:d7:59:3e:64:c9:42:b9:de:86

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.universite-paris-saclay.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.universite-paris-saclay.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.universite-paris-saclay.fr
universite-paris-saclay.fr

Other certificates including the domain name universite-paris-saclay.fr

(limited to 100 certificates)
bbb.imo.universite-paris-saclay.fr
lims.c2n.universite-paris-saclay.fr
apo-wsprofiltest.dsi.universite-paris-saclay.fr
sports.universite-paris-saclay.fr
video.dsi.universite-paris-saclay.fr
connecteursprep.dsi.universite-paris-saclay.fr
apowebtest.dsi.universite-paris-saclay.fr
atlas.universite-paris-saclay.fr
hebergement.universite-paris-saclay.fr
piatest.dsi.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
envues.universite-paris-saclay.fr
www.agora.universite-paris-saclay.fr
gitlab.dsi.universite-paris-saclay.fr
web-bib.imo.universite-paris-saclay.fr
snwtest.dsi.universite-paris-saclay.fr
inception.universite-paris-saclay.fr
envues.universite-paris-saclay.fr
www.photo-club.asso.universite-paris-saclay.fr
www.c2n.universite-paris-saclay.fr
www.ese.universite-paris-saclay.fr
www2.lpgp.universite-paris-saclay.fr
gate.universite-paris-saclay.fr
www-test.c2n.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
ecandidatprep.dsi.universite-paris-saclay.fr
www.bibliotheques.universite-paris-saclay.fr
rh.c2n.universite-paris-saclay.fr
www.polytech.universite-paris-saclay.fr
www.dpo.universite-paris-saclay.fr
www.faculte-sciences-sport.universite-paris-saclay.fr
lmodb.imo.universite-paris-saclay.fr
*.universite-paris-saclay.fr
awacstest.dsi.universite-paris-saclay.fr
pacestest.dsi.universite-paris-saclay.fr
ipa-user.universite-paris-saclay.fr
edith-cms.c2n.universite-paris-saclay.fr
iaprimotest.dsi.universite-paris-saclay.fr
omeka.universite-paris-saclay.fr
annuaire-ladiagonaletest.dsi.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
www.ifsbm.universite-paris-saclay.fr
www.imo.universite-paris-saclay.fr
omeka.universite-paris-saclay.fr
www.sciences-sif.universite-paris-saclay.fr
resa.imo.universite-paris-saclay.fr
www.licence-pro-technico-commercial-cachan.u-psud.fr
bibliolabs.universite-paris-saclay.fr
envues.universite-paris-saclay.fr
idp.universite-paris-saclay.fr
www.dep-chimie.universite-paris-saclay.fr
sso.universite-paris-saclay.fr
edith-cms.c2n.universite-paris-saclay.fr
pia.dsi.universite-paris-saclay.fr
sihamperso.universite-paris-saclay.fr
adonis-api.universite-paris-saclay.fr
www.c2n.universite-paris-saclay.fr
www.persay.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
Athena.universite-paris-saclay.fr
sihampersoform.dsi.universite-paris-saclay.fr
www.collecsciences.universite-paris-saclay.fr
www.cesfo.universite-paris-saclay.fr
*.portailtest.universite-paris-saclay.fr
ecandidattest-gestionnaire.dsi.universite-paris-saclay.fr
sportstest.dsi.universite-paris-saclay.fr
www.apoil.asso.universite-paris-saclay.fr
bdd.c2n.universite-paris-saclay.fr
idp.universite-paris-saclay.fr
mahery2.imo.universite-paris-saclay.fr
re7-extranet.universite-paris-saclay.fr
bernardotest.dsi.universite-paris-saclay.fr
edith-www.c2n.universite-paris-saclay.fr
api.focus.universite-paris-saclay.fr
e-missions-dev.imo.universite-paris-saclay.fr
www.ese.universite-paris-saclay.fr
share.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
www.kiosk-lpgp.universite-paris-saclay.fr
gateprep1.dsi.universite-paris-saclay.fr
www.polytech.universite-paris-saclay.fr
www.c2n.universite-paris-saclay.fr
wp.imo.universite-paris-saclay.fr
lims.c2n.universite-paris-saclay.fr
www.c2n.universite-paris-saclay.fr
hermes.universite-paris-saclay.fr
idm1.idm.universite-paris-saclay.fr
bibliotheque.imo.universite-paris-saclay.fr
www.bibliotheques.universite-paris-saclay.fr
hermes.universite-paris-saclay.fr
extranet.universite-paris-saclay.fr
*.universite-paris-saclay.fr
delta.universite-paris-saclay.fr
wims.universite-paris-saclay.fr
www.iut-orsay.universite-paris-saclay.fr
www.universite-paris-saclay.fr
copernic.universite-paris-saclay.fr
weblosco1.dsi.universite-paris-saclay.fr
www.biocis.universite-paris-saclay.fr
pjweb.universite-paris-saclay.fr

Certificate

The complete raw certificate details for *.universite-paris-saclay.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 130288819509117951858128173132006914276
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UNIVERSITE PARIS-SACLAY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.universite-paris-saclay.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 630694697388094666914109000587973743350709796603041893901319633960733123227265719447773667781784307878608015169175071225246602887701833021375923873319665233783367016225240012950821358794305306717707159896121011449979076436195947481111602031502178829360596201548765764771052517281804323368945036684073178410479552938075200411583705876042714327311527368649635326320794026045012201320815689193486773717038352164526271991025890628895211738176884795559372323205436616917285481099820859777654930319945594065574445488078936815971168620647890221312325513931847952660787384043106364313411917041412559682931922076589563242373979404904157274754067068179252677503570234880506964188329320762217921472424801321707012056514196007825883681302960386882889329251751153009998770951684736393530817893433804320250918748415494763866674447619874518596324866766125930361773979189454218010248634882765920193950741502765699241826182883478117883103660588866239838019182508003546278979740151330190673409339169523751280892477239069383439758745213677295257453557096846770671933117834145163694768072386738611631015379397611069106427389346519794153525506825054170326957087195512612437982759001508818728597782019913305265619944854885631256351095790537000562230957121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							db1eafe701688d140ba72bae02351138c3acca31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universite-paris-saclay.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universite-paris-saclay.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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