remote-uat.eib.org

- European Investment Bank -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 23:c8:f6:0a:2d:0b:a3:14:b8:37:c2:20:ef:c9:c8:f5 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

European Investment Bank

Organization: European Investment Bank
Locality: Luxembourg
Country: LU

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 23:c8:f6:0a:2d:0b:a3:14:b8:37:c2:20:ef:c9:c8:f5
Serial Number (int): 47566429503164038284829183448225270005
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 12:4d:90:3c:11:51:93:98:3e:c3:66:f3:b9:f1:62:7a:f2:4d:bd:d3
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 5e:32:ef:54:0b:76:17:35:b1:78:a8:22:67:78:78:33:e5:5f:d1:ad
Fingerprint (sha256): 2c:c5:63:1a:96:eb:32:c9:a3:e1:24:79:8e:07:82:1c:3a:f3:45:ad:f3:44:36:5b:cb:29:a1:63:32:9c:19:59

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate remote-uat.eib.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for remote-uat.eib.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

remote-uat.eib.org

Other certificates including the domain name eib.org

(limited to 100 certificates)
*.api.greengateway.eib.org
sip.eib.org
sip.eib.org
multisite.adelphi.de
pf4ee-webcheck.eib.org
pf4ee.eib.org
multisite.adelphi.de
my.eib.org
sip2.eib.org
www.eib.org
eib.org
*.eib.org
institute.eib.org
*.eib.org
my.eib.org
multisite.adelphi.de
www.eib.org
sip2.eib.org
www.eif.org
*.eib.org
sip.eib.org
multisite.adelphi.de
remote-uat.eib.org
*.eib.org
sts.eib.org
*.lux.eib.org
multisite.adelphi.de
advisory.eib.org
multisite.adelphi.de
*.eib.org
ews.test.eib.org
sts.eib.org
*.eib.org
*.eib.org
mdmcore-dev.eib.org
*.eib.org
*.eib.org
exwye-01.eib.org
*.eib.org
multisite.adelphi.de
pf4ee-webcheck.eib.org
trad.eib.org
greengateway.eib.org
*.eib.org
lsweb-ext2.eib.org
lsweb-ext.eib.org
greenchecker.eib.org
*.greenchecker.eib.org
erecruitment.eib.org
privateeibforum.eib.org
sip.eib.org
apim-configuration-management-dev.eib.org
institute.eib.org
cwtest.eib.org
inmx.dev.eib.org
*.EIB.ORG
privateeibforum.eib.org
multisite.adelphi.de
multisite.adelphi.de
*.eib.org
institute.eib.org
*.eib.org
NetAccess.eib.org
ews.dev.eib.org
events.advisory.eib.org
*.eib.org
exwye-01.eib.org
*.eib.org
mail.dev.eib.org
advisory.eib.org
multisite.adelphi.de
edge.eib.org
multisite.adelphi.de
sip2.eib.org
pf4ee.eib.org
*.beilux.eib.org
vcs.eib.org
pf4ee.eib.org
www.eif.org
mdmcore-uat.eib.org
helpdesk.greengateway.eib.org
sbc-01.eib.org
sip.eib.org
trad.eib.org
lsweb-ext2.eib.org
sts.eib.org
institute.eib.org
*.eib.org
*.eib.org
www.eib.org
pf4ee.eib.org
mdmsas-dev.eib.org
ews.dev.eib.org
*.eib.org
mdms-dev2.dev.aws.eib.org
pf4ee-webcheck.eib.org
remote.eib.org
sts.eib.org
www.eib.org
advisory.eib.org

Certificate

The complete raw certificate details for remote-uat.eib.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu57wxtnzqktTiXJyCJE
hGjrlHbo/D67aXp9KqPBslESCc/LjD98jNkLMo+XaonP/W4985dlV/rxcNarawgx
AaSfjOyjq4p1excUgTzwXRkLuSByVv2Be6Y8OYxZva63OBD2gBPzBLtmlNyUbofD
s4rJlm/q1f128D6S1rI+VNSslULGiAxyPPV2k/hjh+vDkhJlYWPhD7ZK6TpLle3s
NBZ+6pXWpklxZDv7UAztqYzwXxuSoTnzB41CQLN3RtW1DllCPa9VNjhnNR80p7uO
z8rgFI0YzMXGjXnB0hUfEaSazpZ+ZzH5M12TDcp8Y9RIJ3bDK2nR4SKqTeX+81np
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 47566429503164038284829183448225270005
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 15:22:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-12 15:22:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'European Investment Bank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'remote-uat.eib.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25112784953460215899493209363754255883157050833038081206127842192659866325513524390550646040236564522027065592966324525973840643733192053502723452269801649112102398559174493210150100243579209316312697233223669363126826987782957133015473311062500926685299418381946035995902548166292944990728094669302425796307918617608851253327907343996244515178127044801816278237883463340052889074672116353283813184882817053901643942769887215326920295176561617002718009674302700729024570756663276502946267050720557364222463942036821061506278667907617861818342112543692475271404031169583765971169444363332883855049950376995591523265011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							124d903c115193983ec366f3b9f1627af24dbdd3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote-uat.eib.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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