primula.sh.se

- Södertörns högskola -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 82:38:17:3e:92:e6:a9:91:59:c4:9c:2f:6f:fd:9f:f7 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Södertörns högskola

Organization: Södertörns högskola
State / Province: Stockholms län
Country: SE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 82:38:17:3e:92:e6:a9:91:59:c4:9c:2f:6f:fd:9f:f7
Serial Number (int): 173090879529147638831111014311679336439
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: fd:d3:69:eb:3a:14:fb:d3:7d:3a:18:73:3c:44:4c:26:6d:0e:f0:dd
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): ba:8f:d2:66:4e:26:6a:91:11:c0:1b:ac:71:63:ad:b9:06:23:2b:54
Fingerprint (sha256): 2f:7f:de:da:79:c5:14:d3:fc:fe:7b:c2:1a:84:37:0c:9d:dd:c3:7e:35:5c:63:6d:f6:54:79:bc:fb:3d:1a:66

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate primula.sh.se

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for primula.sh.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

primula.sh.se
www.primula.sh.se

Other certificates including the domain name sh.se

(limited to 100 certificates)
www.sh.se
ssd04.web.sh.se
graduateland.com
webappl.web.sh.se
*.till.biblextern.sh.se
bibl.sh.se
usersync.errai.sh.se
earkiv.sh.se
graduateland.com
rad1.eduroam.sh.se
*.bibl.sh.se
api.bibl.sh.se
graduateland.com
careergate.sh.se
careerland.dk
careergate.sh.se
play.sh.se
graduateland.com
webappo.web.sh.se
dubhe.suni.se
support.mi.sh.se
primula.sh.se
graduateland.com
graduateland.com
graduateland.com
graduateland.com
mob01.web.sh.se
av.sh.se
spk03.web.sh.se
graduateland.com
*.bibl.sh.se
kvalitet.sh.se
ssd02.web.sh.se
career.cphbusiness.dk
graduateland.com
career.cphbusiness.dk
primula.sh.se
career.cphbusiness.dk
*.till.biblextern.sh.se
api.sh.se
blogg.sh.se
career.cphbusiness.dk
graduateland.com
terebellum.suni.se
www.sh.se
career.cphbusiness.dk
careerland.dk
graduateland.com
primula.sh.se
*.bibl.sh.se
blogg.sh.se
career.cphbusiness.dk
bibl.sh.se
api.sh.se
careerland.dk
dubhe.suni.se
primula.sh.se
career.cphbusiness.dk
career.cphbusiness.dk
info.web.sh.se
apputv.sh.se
www.sh.se
itsl.bibl.sh.se
bibl.sh.se
api.sh.se
kronox-test.sh.se
student.web.sh.se
bibl-app.sh.se
*.till.biblextern.sh.se
graduateland.com
app.sh.se
rad2.eduroam.sh.se
careerland.dk
career.cphbusiness.dk
webappl.web.sh.se
apptest.sh.se
*.bibl.sh.se
www.sh.se
*.mi.sh.se
faktaassistenten.sh.se
faktaassistenten.sh.se
careergate.sh.se
www.sh.se
dubhe.suni.se
blogg.sh.se
itsl.bibl.sh.se
sim01.web.sh.se
apptest.sh.se
career.cphbusiness.dk
career.cphbusiness.dk
www.sh.se
graduateland.com
blogg.sh.se
*.web.sh.se
www.sh.se
bibl.sh.se
bibl.sh.se
api.sh.se
faktaassistenten.sh.se
student.mi.sh.se

Certificate

The complete raw certificate details for primula.sh.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9ZV+Rs2jj1qn3u2pPLt
luIrHarypEvwzokI3R5ZTxKmHfXCrZi04FSJ0qjTzZVvN01xMyX36+6fol3HStB1
Y14PJY3t6ZOnCR1bhvzrK2quMAvptqd0MIXr1Twmg2uBR9H1weTjZB6S6eHn99eP
naPntriEQzkoSaGmpvxabPe3kza2vcUWivNNYn7qAN1kDW/6i0zPaGXvujDvfgld
25BSBwTcUAHuaJ/3rWLP0sSZXZCHim3R7Ddfu3DEF5qbNItjkbnaRjOmv907MsKl
x9cZV12eGCVY1NERU7sgfibmxn28qVVzBEH1/wk73vwQoHzESmk5aUPGyr3Dmi8v
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 173090879529147638831111014311679336439
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stockholms län'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Södertörns högskola'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'primula.sh.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24722162406523491613934630600912767611157809004624975661017134296728780538584863813748601169854309300882820759708635399900641445339017606277713871198606044356875629515776705925279139882074494878566740177112397269227114403921848144149224386024432230029940909270579194180367724348359469520623393223085258342842963542003659774932299953077351896746239614618914723574185766743377962093996963245379638181019477460077341248935664888943123525575196281236800348432526062674060045946430723842348651387009665299656488578223465411159492022876922203469473779224370448592721651591228463646722654917595318298967972647589043229372313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fdd369eb3a14fbd37d3a18733c444c266d0ef0dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primula.sh.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primula.sh.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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