hal.univ-grenoble-alpes.fr

- Université Grenoble Alpes -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 6a:40:9e:1c:0b:db:c3:e6:47:59:0e:04:2a:67:c4:44 was issued on by GEANT Vereniging.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Université Grenoble Alpes

Organization: Université Grenoble Alpes
State / Province: Auvergne-Rhône-Alpes
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 6a:40:9e:1c:0b:db:c3:e6:47:59:0e:04:2a:67:c4:44
Serial Number (int): 141233681394923253831244788379641431108
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 37:e7:bd:31:16:b9:b3:2f:59:bb:3c:84:c5:34:64:d0:7e:4c:a6:40
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 36:5d:71:f1:86:14:49:ee:ce:bd:66:e0:db:1b:cd:98:e2:7d:7a:8b
Fingerprint (sha256): 2d:ff:3c:c6:da:0f:73:2f:cc:85:a2:ed:03:79:2b:63:bc:9e:62:83:74:9e:d8:ca:72:e9:7c:5a:21:01:3e:0d

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate hal.univ-grenoble-alpes.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hal.univ-grenoble-alpes.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hal.univ-grenoble-alpes.fr

Other certificates including the domain name univ-grenoble-alpes.fr

(limited to 100 certificates)
chamilo.iut2.univ-grenoble-alpes.fr
shib3v3.univ-grenoble-alpes.fr
iut1-srv-web18.univ-grenoble-alpes.fr
enquetes.univ-grenoble-alpes.fr
projects-call.univ-grenoble-alpes.fr
copass.grenet.fr
miage-grenoble.univ-grenoble-alpes.fr
housing.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
gin5-serv.univ-grenoble-alpes.fr
fuga-media-stock.univ-grenoble-alpes.fr
www-fourier.univ-grenoble-alpes.fr
partage-lsi.univ-grenoble-alpes.fr
persyval-lab.univ-grenoble-alpes.fr
sk-cic-it.imag.fr
gricad-registry-test.univ-grenoble-alpes.fr
copass.grenet.fr
ifmail.univ-grenoble-alpes.fr
apple-uga.u-ga.fr
pilote.univ-grenoble-alpes.fr
gricad.univ-grenoble-alpes.fr
ist-web3.ujf-grenoble.fr
ufrim2ag.ujf-grenoble.fr
gin-serv.univ-grenoble-alpes.fr
lig-expire-web.imag.fr
echamilo.grenet.fr
datageosciences.univ-grenoble-alpes.fr
projects-call.univ-grenoble-alpes.fr
fabmstic.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
self6.univ-grenoble-alpes.fr
ulea-wiki.univ-grenoble-alpes.fr
ifmission.ujf-grenoble.fr
ecandidat-gestionnaire.univ-grenoble-alpes.fr
housing.univ-grenoble-alpes.fr
sante-lsurvey.univ-grenoble-alpes.fr
iut1-culture-etudiant.univ-grenoble-alpes.fr
wcp.univ-grenoble-alpes.fr
self7.univ-grenoble-alpes.fr
if-forge.ujf-grenoble.fr
self.univ-grenoble-alpes.fr
resa-ictiss.imag.fr
vpn2-int.iut2.univ-grenoble-alpes.fr
iut1-mmi-moodle.univ-grenoble-alpes.fr
copass.grenet.fr
gricad-doc.univ-grenoble-alpes.fr
chamilo-uga-vs.grenet.fr
copass-client.grenet.fr
projects-call.univ-grenoble-alpes.fr
projects-call.univ-grenoble-alpes.fr
cours.univ-grenoble-alpes.fr
self.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
ifmission.univ-grenoble-alpes.fr
ldap.iut2.upmf-grenoble.fr
*.gricad-pages.univ-grenoble-alpes.fr
portail.univ-grenoble-alpes.fr
www-liphy.ujf-grenoble.fr
self5.univ-grenoble-alpes.fr
self.univ-grenoble-alpes.fr
www-fourier.ujf-grenoble.fr
ecandidat-gestionnaire.univ-grenoble-alpes.fr
ist-geodyn.univ-grenoble-alpes.fr
im2ag-sgce.e.univ-grenoble-alpes.fr
ametys-uga.grenet.fr
shibboleth.univ-grenoble-alpes.fr
intranet-timc.imag.fr
cloud.univ-grenoble-alpes.fr
arpont.imag.fr
observatoire.univ-grenoble-alpes.fr
*.gricad-gitlab.univ-grenoble-alpes.fr
sum-graf.univ-grenoble-alpes.fr
iut1-srv-web14.univ-grenoble-alpes.fr
fourier.univ-grenoble-alpes.fr
lig-wwwphp.imag.fr
dev-1.u-ga.fr
ifforge.univ-grenoble-alpes.fr
auth.univ-grenoble-alpes.fr
ist-sismalp.osug.fr
*.comar-project.univ-grenoble-alpes.fr
eformation.univ-grenoble-alpes.fr
ljk.univ-grenoble-alpes.fr
im2ag-wiki.univ-grenoble-alpes.fr
help.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
veri-web-projects.univ-grenoble-alpes.fr
visio-preprod.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
cours.univ-grenoble-alpes.fr
www-info.iut2.upmf-grenoble.fr
www-fourier.ujf-grenoble.fr
iut1-srv-web19.univ-grenoble-alpes.fr
gin11-web.univ-grenoble-alpes.fr
*.univ-grenoble-alpes.fr
cloud-test.univ-grenoble-alpes.fr
hal.univ-grenoble-alpes.fr
gricad-wiki.univ-grenoble-alpes.fr
chamilo-iut2-vs.grenet.fr
enquetes.univ-grenoble-alpes.fr
superdoc.iut2.univ-grenoble-alpes.fr

Certificate

The complete raw certificate details for hal.univ-grenoble-alpes.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 141233681394923253831244788379641431108
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auvergne-Rhône-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Université Grenoble Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hal.univ-grenoble-alpes.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 867662624948178336747715049209438617860639945523211567650788727850360885455941763298160161868051992196651227826250959125045014824715153904324038238049789395731021185851175483033865345936617308287007414307303276214874890470233820693970691774246444415918612519295762132713184672487132373565533259911036183178949265280541936268594079022133294114102109998364846231476641419935487957340447469196397975927563861835009306074905625143882579866161163221678252791040648154905284975361055669399307397859768930109870229122572248467034362605906428988948175788359438218437079744112070004388643642754263475477659987083793545369000258418839098579126379300560788913183032459162049314211180294936191189731801580360489218680767979053952548600395130043409254091860923474617857341569136073388600711642715213624606073274061505704089383728346118292256238312954067584503865224075502789070930216202894160772401945015593410833697903282039032053460711801905655523171007006400303921844189571869360033800983551257276448811963450097987311796761179562704040248452885071042273743087027097247565754929020350188363696254056361392064668007676276489708840005025423606619044056389428710858140509046844446113196442409050925933979671034547766911639026406943229990857815361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37e7bd3116b9b32f59bb3c84c53464d07e4ca640
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hal.univ-grenoble-alpes.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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