sap-dev-ffdx.forux.nl

- Universiteit van Amsterdam -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number dc:a9:05:34:ca:50:1b:81:5e:3c:96:fd:d3:ea:72:25 was issued on by GEANT Vereniging.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universiteit van Amsterdam

Organization: Universiteit van Amsterdam
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): dc:a9:05:34:ca:50:1b:81:5e:3c:96:fd:d3:ea:72:25
Serial Number (int): 293307762836299162847953247302285160997
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 27:57:b4:35:1f:b4:9b:47:02:ec:a3:69:d9:31:00:75:a6:48:47:60
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): d2:9a:b2:9c:a0:22:c9:86:a0:3d:ed:42:fb:80:03:e2:e4:44:f4:0b
Fingerprint (sha256): 2d:1d:db:9c:42:17:9f:5f:a9:eb:b3:00:06:8a:e8:a8:a4:41:0d:46:2d:b9:2a:d4:3d:ab:2e:63:88:d7:c3:4c

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate sap-dev-ffdx.forux.nl

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sap-dev-ffdx.forux.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sap-dev-ffdx.forux.nl
sap-dev-ffd1.forux.nl
sap-dev-ffd2.forux.nl

Other certificates including the domain name forux.nl

(limited to 100 certificates)
sap-dev-rudx.ic.uva.nl
psql-prd1.forux.nl
sap-acc-ruax.ic.uva.nl
content-dev.sap.uva.nl
canvas-acc-apps2.forux.nl
gitlab-dev.forux.nl
moodle-prd-db1.forux.nl
unixbeheer.forux.nl
sap-prd-bupx.forux.nl
hva.nl
admin.uva.icts-dev-app1.aws.forux.nl
maven.ic.uva.nl
netbox.forux.nl
diensten.uba.uva.nl
moodle-prd-db1.forux.nl
canvas-acc-apps2.forux.nl
sap-prd-ffpx.forux.nl
aanmelden.hva.nl
netdisco-acc1.forux.nl
hva.nl
uvacms-tst-ic1.forux.nl
expenseclaims.uva.nl
airm-acc.forux.nl
psql-prd1.forux.nl
admin.hva.icts-dev-app1.aws.forux.nl
gitlab-dev.forux.nl
ipam-dev1.forux.nl
tsm.uva.nl
lamp-prd-dba1.forux.nl
uvacms-tst-fe1.forux.nl
uvacms-tst-ic1.forux.nl
tst-aanmelden.hva.nl
api.ocp-tst1.ocp2.forux.nl
api.expenseclaims.uva.nl
ocpidp-acc.lb.forux.nl
content.sap.uva.nl
ocpidp-prd.lb.forux.nl
content-acc.sap.uva.nl
web-prd-wordpress1.forux.nl
expenseclaims-acc.uva.nl
loadbalancer.icts-dev-app1.aws.forux.nl
hva.nl
tower.forux.nl
jira.ic.uva.nl
cas-acc4.forux.nl
api.ocp-prd1.ocp1.forux.nl
builder.ic.uva.nl
airm-acc.forux.nl
nra.sis.uva.nl
admin.uva.icts-dev-app1.aws.forux.nl
monitor.forux.nl
moodle-dev.fdmci.hva.nl
unixbeheer.forux.nl
tower-dev.forux.nl
m.sis.uva.nl
uvacms-tst-be1.forux.nl
uvacms-tst-fe1.forux.nl
sap-dev-budx.ic.uva.nl
integration-test.cms.uva.nl
content.sap.uva.nl
psql-prd1.forux.nl
hva.nl
cmx-prd-anonymizer1.forux.nl
content.sap.uva.nl
vault.forux.nl
canvas-tst-apps1.forux.nl
uvacms-tst-ic1.forux.nl
sap-dev-ffdx.forux.nl
tsm-dev.ic.uva.nl
kassa.hva.icts-dev-app1.aws.forux.nl
kassa.uva.icts-dev-app1.aws.forux.nl
ldap-dev.ic.uva.nl
tlscertmon-dev.forux.nl
a10-devx.forux.nl
psql-dev1.forux.nl
monitor.forux.nl
nessus-prd1.forux.nl
uvacms-prd-ic1.forux.nl
hvacms-acc-fe1.forux.nl
moodle-prd-db1.forux.nl
uvacms-acc-fe1.forux.nl
test.uba.uva.nl
oim-prd-fe1.forux.nl
gitlab-dev.forux.nl
moodle-prd-db1.forux.nl
ipam.forux.nl
lamp-prd-dba1.forux.nl
hvacms-acc-ic1.forux.nl
smtp-acc3.forux.nl
sap-prd-rupx.ic.uva.nl
netdisco-acc1.forux.nl
hvacms-acc-ic1.forux.nl
loadbalancer.icts-dev-app1.aws.forux.nl
canvas-acc-apps1.forux.nl
labservant.ic.uva.nl
sap-tst-ruzx.forux.nl
sap-prd-bupx.forux.nl
ubbis-prd-web1.forux.nl
hvacms-acc-be1.forux.nl
ubdpc-acc-web2.forux.nl

Certificate

The complete raw certificate details for sap-dev-ffdx.forux.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293307762836299162847953247302285160997
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universiteit van Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sap-dev-ffdx.forux.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 939075514764307615632000042427950715020117946637700127436666491053351126666584040498841203107932016882126581546717487616706285179338500110815432921379682409031562643377823945293473077371679071848425445288694368045934381592022967943075345034765319683353513678180475033083352601025247727194594977907870514943293186227016340154262333234069308778144540334922067874191979031140492635601046518666397921806697581827703280784671176064828483455113566410993283715336470849861247451283674137777049314432216360092116046961781328251866453646306399229885118808690370206080991834990912162549834609021232455412940380419856842873463792600430324426396026202503750653719020440579705290038073180251086284055673155402702757853961996447519634379900415281533277621441764712512764142605550674800448947511423900782319199154839284823065505905596964625585069492089944147639639652593450955840106765264679419779583124741015430398831896920985525582669633622353279114925564199006322541310961695589654069960835691161317044765104480757972219633869091832175036575594612990050604072915805582975362237056657197548491531079660565339016293588323085266635882519298256824550354402392207818453053958766917136800214691257087222008023717701637652239743517361155492246450863407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2757b4351fb49b4702eca369d9310075a6484760
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sap-dev-ffdx.forux.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sap-dev-ffd1.forux.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sap-dev-ffd2.forux.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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