wiki.idem.garr.it

- Consortium GARR -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 06:e0:de:2a:ab:0e:76:ed:7b:b3:be:45:46:7a:7d:26 was issued on by TERENA.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Consortium GARR

Organization: Consortium GARR
Locality: Rome
Country: IT

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 06:e0:de:2a:ab:0e:76:ed:7b:b3:be:45:46:7a:7d:26
Serial Number (int): 9142948546475556157111581697981971750
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 6d:83:c2:48:76:e0:b7:cd:34:62:ca:9d:c8:94:8a:0f:d8:47:36:f6
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 27:b6:6c:42:d6:f1:08:96:5e:f6:60:35:2c:43:6e:92:fc:19:1f:07
Fingerprint (sha256): 2b:a0:88:51:36:bb:c0:42:94:20:7c:78:98:d9:5b:13:9f:b8:94:bb:ed:5e:e1:97:e7:bb:16:ab:d6:e9:6a:0e

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate wiki.idem.garr.it

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wiki.idem.garr.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wiki.idem.garr.it
wiki-prod.idem.garr.it
wiki-idem.aai.garr.it
wiki.idem.garrservices.it

Other certificates including the domain name garr.it

(limited to 100 certificates)
co.aai.garr.it
learning.garr.it
wiki.garr.it
st-be-ba1-test.infra.garr.it
idp-ospedalesanmartino.irccs.garr.it
idp-iov.irccs.garr.it
idp-css.irccs.garr.it
wkngx2.garr.it
mx2.dir.garr.it
www.garr.it
filesender-test.infra.garr.it
garrbox.garr.it
idp-ubuntu.aai-test.garr.it
test.webmeetings.garr.it
agenda.garr.it
git.garr.it
idp-neuromed.irccs.garr.it
filesender-test.infra.garr.it
enea.workplace.garr.it
dashboard-devel-mellon.cloud.garr.it
gbox.garr.it
dashboard-staging-idem.cloud.garr.it
ca.garr.it
icdi.workplace.garr.it
idp311.idem.garr.it
wiki.garr.it
idp-oasi.irccs.garr.it
vpnsrv.garr.it
webmeetings.garr.it
cartellino.dir.garr.it
keystone-staging.cloud.garr.it
cloud.garr.it
demo-idp.ct1.garrservices.it
eosc.eu
vconf.garr.it
open.meet.garr.it
hv02b-mgmt.bo1.infra.garr.it
eosc.workplace.garr.it
wiki.idem.garr.it
grouper.idem.garr.it
wayf.idem-test.garr.it
pexip-mgmt.infra.garr.it
git.garr.it
le1.test.garr.it
idpopen.garr.it
hv02c.bo1.infra.garr.it
idp-css.irccs.garr.it
aarc-satosa.aai-test.garr.it
idp-maugeri.irccs.garr.it
idp-stellamaris.irccs.garr.it
sg-liferay.garr.it
meeting01.garr.it
www.idem.garr.it
cert.garr.it
rancher.infra.garr.it
idp311.idem.garr.it
idp-fbf.irccs.garr.it
wayf.idem-test.garr.it
grouper.idem.garr.it
sg-liferay.garr.it
lx5.dir.garr.it
hv02d-mgmt.bo1.infra.garr.it
printers.dir.garr.it
wkngx1.garr.it
hv03a.bo1.infra.garr.it
wiki.idem.garr.it
*.mirror.garr.it
vpnops.dir.garr.it
icdi.workplace.garr.it
gridsrv3-4.dir.garr.it
garr.workplace.garr.it
idp-sicilia.izs.garr.it
onlyoffice.cloud.garr.it
idp-fticks-test.aai-test.garr.it
login.sso.garr.it
idp-portici.izs.garr.it
rinnovoconvenzioni.garr.it
www.idem.garr.it
www.support.garr.it
wireless.dir.garr.it
turn-02-preprod.meet.garr.it
gn4-3.workplace.garr.it
registry.idem.garr.it
hv01d-mgmt.bo1.infra.garr.it
idp-sdn.irccs.garr.it
dashboard-staging.cloud.garr.it
sp24-test.garr.it
metadata.dir.garr.it
idp-ieo.irccs.garr.it
idp-css.irccs.garr.it
agenda.garr.it
garr.it
grouper.idem.garr.it
filesender.garr.it
kibana.aai.garr.it
primologin-gbox.garr.it
idp-iccu.beniculturali.garr.it
learning.garr.it
gn4-3.workplace.garr.it
dashboard.cloud.garr.it

Certificate

The complete raw certificate details for wiki.idem.garr.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9142948546475556157111581697981971750
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rome'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Consortium GARR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wiki.idem.garr.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786842610794082601686019928077365593288030152025511371764185395903069049570695967054086504177310766178993764387022306148288501330694442940844439299908280245767320112904593056573857284829291117372716932602329042737291268246921218943434975112176802151812160218484947281579661178476991606486889606087516465563650514998676060490947250127250718376683649414313207620691946748351980939777831593505218161996801687206447998123620601672519830417281081966940420361894476615758839941014977516852998664896382604312564156142825032096181691585334178146749949559498353962679495651293797981678945749294546624781220712432678952482034912315528104853056272974989899319684222764248977657587070660964217154260107809708496371145021636546982284993746274696632016623610277601310308156932597771589275019903207144727479740247723139226460898259961726789421580645264808291663561184013743477040728030606773206970258878830905337932899152132641442045638713919121768834925280530493543734730004971501258440180621654281890861616521587916725554687396025915184433921233664048185555922754694705995070853027743692127482539601507781101396632714198442858686079328410345562621881044006544494994451286775708660708906588664028752826237045326616960886942178267456066280266507891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d83c24876e0b7cd3462ca9dc8948a0fd84736f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.idem.garr.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki-prod.idem.garr.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki-idem.aai.garr.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.idem.garrservices.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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