exwye-01.eib.org

- European Investment Bank -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 4e:1b:79:fa:2a:4c:a6:db:87:b3:a3:c6:5a:22:3a:74 was issued on by Entrust, Inc..

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

European Investment Bank

Organization: European Investment Bank
Locality: Luxembourg
Country: LU

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 4e:1b:79:fa:2a:4c:a6:db:87:b3:a3:c6:5a:22:3a:74
Serial Number (int): 103822449678097585587911622601627286132
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 89:a7:33:d1:d1:7a:e8:05:5f:b2:30:08:df:6c:0f:57:52:a0:22:7c
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 27:de:3d:18:d5:ba:66:09:48:61:c9:06:39:46:ad:94:bf:84:72:c0
Fingerprint (sha256): 38:d9:8d:ac:20:5e:b2:e0:58:aa:9b:43:3d:47:5b:8e:8f:33:bd:a0:63:81:7c:25:5c:85:e4:49:b3:fa:0b:0e

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate exwye-01.eib.org

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exwye-01.eib.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

exwye-01.eib.org
exwye.eib.org
exwye-04.eib.org
exwye-03.eib.org
exwye-02.eib.org
join.eib.org
vc.eib.org

Other certificates including the domain name eib.org

(limited to 100 certificates)
*.api.greengateway.eib.org
sip.eib.org
sip.eib.org
multisite.adelphi.de
pf4ee-webcheck.eib.org
pf4ee.eib.org
multisite.adelphi.de
my.eib.org
sip2.eib.org
www.eib.org
eib.org
*.eib.org
institute.eib.org
*.eib.org
my.eib.org
multisite.adelphi.de
www.eib.org
sip2.eib.org
www.eif.org
*.eib.org
sip.eib.org
multisite.adelphi.de
remote-uat.eib.org
*.eib.org
sts.eib.org
*.lux.eib.org
multisite.adelphi.de
advisory.eib.org
multisite.adelphi.de
*.eib.org
ews.test.eib.org
sts.eib.org
*.eib.org
*.eib.org
mdmcore-dev.eib.org
*.eib.org
*.eib.org
exwye-01.eib.org
*.eib.org
multisite.adelphi.de
pf4ee-webcheck.eib.org
trad.eib.org
greengateway.eib.org
*.eib.org
lsweb-ext2.eib.org
lsweb-ext.eib.org
greenchecker.eib.org
*.greenchecker.eib.org
erecruitment.eib.org
privateeibforum.eib.org
sip.eib.org
apim-configuration-management-dev.eib.org
institute.eib.org
cwtest.eib.org
inmx.dev.eib.org
*.EIB.ORG
privateeibforum.eib.org
multisite.adelphi.de
multisite.adelphi.de
*.eib.org
institute.eib.org
*.eib.org
NetAccess.eib.org
ews.dev.eib.org
events.advisory.eib.org
*.eib.org
exwye-01.eib.org
*.eib.org
mail.dev.eib.org
advisory.eib.org
multisite.adelphi.de
edge.eib.org
multisite.adelphi.de
sip2.eib.org
pf4ee.eib.org
*.beilux.eib.org
vcs.eib.org
pf4ee.eib.org
www.eif.org
mdmcore-uat.eib.org
helpdesk.greengateway.eib.org
sbc-01.eib.org
sip.eib.org
trad.eib.org
lsweb-ext2.eib.org
sts.eib.org
institute.eib.org
*.eib.org
*.eib.org
www.eib.org
pf4ee.eib.org
mdmsas-dev.eib.org
ews.dev.eib.org
*.eib.org
mdms-dev2.dev.aws.eib.org
pf4ee-webcheck.eib.org
remote.eib.org
sts.eib.org
www.eib.org
advisory.eib.org

Certificate

The complete raw certificate details for exwye-01.eib.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 103822449678097585587911622601627286132
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 13:56:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-12 13:56:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'European Investment Bank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exwye-01.eib.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 677096256828004162997258004535975631551319238846221017706799924731943738395583083073789895271780887573518588766440940049688513259875554996765916907893963997310941246505919304577266812668520643054953461321609180603914044194228237452233770944738227868095272058678413548223607945599110863049987102728446148709970944305686313630562675095954767871552655547332395415021417648602626303728714241471528232563982606145706457733468875676050857747518020778658592994908408069329252061287534202079649250080922743497241442520181240808342418728022072799860925603129020842657863173834680099288591200097337910916899172571363351345419595951549536726983588421289900709614911465396719064908042512855653849897336558300950919874142215737331911138237258449591245494841151220436133196332223651281133084995461957862036324306624348291395983623021571410342798652526648609938530285621208688946486127698853156759725224664042725056576320611596650720745248936935034019848287485822315811949241255849643020790122842876521860945451294865914010312197859382956493022324641263693874176394615272871574654748960843248101881284826145144143385693015336963284946782226327160776785724130703958812474635287640753418307253473015277450762404546034756230000122818977690326316089749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89a733d1d17ae8055fb23008df6c0f5752a0227c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exwye-01.eib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exwye.eib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exwye-04.eib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exwye-03.eib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exwye-02.eib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.eib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vc.eib.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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