evasys.tudelft.nl

- Technische Universiteit Delft -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number d5:34:4b:ac:11:fc:46:f4:10:fe:b7:29:d2:dd:b0:44 was issued on by GEANT Vereniging.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Technische Universiteit Delft

Organization: Technische Universiteit Delft
State / Province: Zuid-Holland
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): d5:34:4b:ac:11:fc:46:f4:10:fe:b7:29:d2:dd:b0:44
Serial Number (int): 283397097352361347835332076901832175684
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:26:6e:66:5d:00:24:48:5b:36:14:4a:7a:54:ce:50:d5:8b:c3:fa
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 22:1b:77:35:e5:07:46:39:77:3a:21:4a:9d:43:52:f5:d9:38:a6:aa
Fingerprint (sha256): 37:34:ea:86:c8:8a:16:d8:58:b4:51:42:e3:8c:af:b2:86:5d:ae:84:3b:f4:98:b5:a6:e9:2a:6d:21:7a:e9:99

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate evasys.tudelft.nl

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for evasys.tudelft.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

evasys.tudelft.nl
evasys-survey.tudelft.nl
evasyslive.tudelft.nl
srv417.tudelft.net
srv540.tudelft.net
srv542.tudelft.net

Other certificates including the domain name tudelft.nl

(limited to 100 certificates)
solidstate.quantumtinkerer.tudelft.nl
api.p-cube.gamelab-staging.tbm.tudelft.nl
bepsys.ewi.tudelft.nl
webdsl-org.ewi.tudelft.nl
talentservices.tudelft.nl
wism8.dunet.tudelft.nl
www.pp1.tudelft.nl
suslabnwe-en.io.tudelft.nl
eipdev.ewi.tudelft.nl
quantumtinkerer.tudelft.nl
www.hooke.tudelft.nl
mattermost-imphys.tudelft.nl
3d.bk.tudelft.nl
hpcwiki.tudelft.nl
suslabnwe-de.io.tudelft.nl
externenmds.tudelft.nl
webdsl-2015.ewi.tudelft.nl
telefoonboek.tudelft.nl
searchenginewis2.ewi.tudelft.nl
se.ewi.tudelft.nl
ipms-prd1.tudelft.nl
bitrix24.tbm.tudelft.nl
punch.tudelft.nl
oauth-t.tudelft.nl
inforln.tudelft.nl
3d.bk.tudelft.nl
bktoi1.bk.tudelft.nl
abdowiki.tudelft.nl
www.broach.nl
webapp.tudelft.nl
demoprojects.tudelft.nl
telewerken.tudelft.nl
pl-jenkins.ewi.tudelft.nl
bbtest.tudelft.nl
marsrv.tudelft.nl
4tudata-libbuild.tudelft.nl
inforln.tudelft.nl
mod-est.tbm.tudelft.nl
coin2013-prima.tudelft.nl
syllabus.tudelft.nl
aecoderunner.lr.tudelft.nl
erfgoed.tudelft.nl
www.civielebedrijvendagen.nl
was.tudelft.nl
sysadminwiki.tudelft.nl
esb-gateway.tudelft.nl
www.vvtp.tudelft.nl
services.sc.tudelft.nl
3d.bk.tudelft.nl
campusdevelopment.tudelft.nl
marsrv.tudelft.nl
svn.3me.tudelft.nl
lamp6.tudelft.nl
svn.tnw.tudelft.nl
www.dined.nl
dutmail.tudelft.nl
b2bcrm.tudelft.nl
www.nas.ewi.tudelft.nl
b2bcrm.tudelft.nl
qutech.tudelft.nl
personeelsdossiers.tudelft.nl
zandmotor-libtest.tudelft.nl
www.beeldportal.tudelft.nl
labservant.tudelft.nl
lampict2.tudelft.nl
coursemaptest.tudelft.nl
se.ewi.tudelft.nl
presto.tudelft.nl
3d.bk.tudelft.nl
www.punch.tudelft.nl
reservation.ekl.tudelft.nl
qit.ewi.tudelft.nl
elearning-libprod.tudelft.nl
www.praktischestudie.nl
handler.tudelft.nl
matchmakers.ewi.tudelft.nl
newmediacentre.tudelft.nl
burgerbegroting.tbm.tudelft.nl
www.broach.nl
ismir2019.ewi.tudelft.nl
sg-4.tbm.tudelft.nl
srv775-2.tudelft.net
www.dcsc.tudelft.nl
ppm1.tudelft.nl
lts1-test.tbm.tudelft.nl
inclusivedesign.io.tudelft.nl
visit.tudelft.nl
eurasipdev.ewi.tudelft.nl
ei.tudelft.nl
elearning-libaccp.tudelft.nl
www.practischestudie.nl
api.myota-test.tudelft.nl
svn.bk.tudelft.nl
gnss1.tudelft.nl
luistermutant.gamelab.tbm.tudelft.nl
filr.tudelft.nl
trendhost-cb.tudelft.nl
www.punch.tudelft.nl
research.tudelft.nl
osidoc.tudelft.nl

Certificate

The complete raw certificate details for evasys.tudelft.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283397097352361347835332076901832175684
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technische Universiteit Delft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'evasys.tudelft.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 884591406988900953466477378311138438720576614624873547794073605856199264529678839657745805688187981566384585106012250640609753952016892891374140926447405256217302315978600133455884790665951515403723254375583141241069900301665002039641425959347037660771804528740321611659565935464858328975246251536400891238767341396661369394758370736823962831289652631468590596214602520181179221167944567845760684471478254435373774519004003537971421848430393459175564681623561804153904191739524204465086673078802798038411958760505253554633463165028815292256184609792994893097781513257369195688689562922896337110368861977797904992378082631707961259747951676841693715585584369968659244065851600471402965546159941523560568569310900408352079183435298612246162448271775885981955169217659135974735958689303694080526294190623758462315840677676734952856758106576688124018823614008574196411399085551494649890380246515906392848374905345769453914852685964428820592119353599766021868641108738358459357076045739336646916433107429456164666320227531062256414641555698336177832752238246906321906046287262911731825412373624422471474215290851868738349446013993649645550617385955872526711911020655147414283708719745918663173827760888522721570753079279390985760081433501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							21266e665d0024485b36144a7a54ce50d58bc3fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evasys.tudelft.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evasys-survey.tudelft.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evasyslive.tudelft.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv417.tudelft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv540.tudelft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv542.tudelft.net'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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