ff.truni.sk

- Trnavská univerzita v Trnave -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 3a:2e:3b:27:8c:a8:4f:67:41:fe:da:29:49:ec:e8:14 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Trnavská univerzita v Trnave

Organization: Trnavská univerzita v Trnave
State / Province: Trnavský kraj
Country: SK

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 3a:2e:3b:27:8c:a8:4f:67:41:fe:da:29:49:ec:e8:14
Serial Number (int): 77335269206614052088603223107738331156
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 7a:37:34:be:bf:d0:08:40:51:0c:02:a9:13:f5:78:f3:95:ce:0b:a9
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 4a:04:2d:7f:46:47:7f:27:7c:e5:1e:b1:d0:a4:86:84:a3:fd:3b:21
Fingerprint (sha256): 3d:b2:2e:52:7e:d2:37:8c:0b:80:cf:b0:42:16:44:05:9e:8a:83:50:97:28:7c:85:2b:47:1b:dc:40:45:1c:56

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate ff.truni.sk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ff.truni.sk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ff.truni.sk
www.ff.truni.sk

Other certificates including the domain name truni.sk

(limited to 100 certificates)
webmail.truni.sk
webmail.tvu.sk
www.truni.sk
idmportal.truni.sk
wap.truni.sk
webmail.truni.sk
meteo.truni.sk
pdf.truni.sk
strava.truni.sk
indukcia.truni.sk
www.truni.sk
ezp.truni.sk
sts.truni.sk
ff.truni.sk
www.truni.sk
sibidp.truni.sk
meteo.truni.sk
vpn.truni.sk
pdf.truni.sk
shib-idp.truni.sk
rlgc.truni.sk
strava.truni.sk
moodle.truni.sk
webmail.tvu.sk
www.truni.sk
strava.truni.sk
strava.truni.sk
connect.truni.sk
rdgateway.truni.sk
radius2.truni.sk
esmc.truni.sk
strava.truni.sk
strava.truni.sk
ezp.truni.sk
strava.truni.sk
www.truni.sk
eshop.truni.sk
sts.truni.sk
mais.truni.sk
3point.truni.sk
idmportal.truni.sk
radius1.truni.sk
fzsp.truni.sk
mais.truni.sk
www.truni.sk
moodletest.truni.sk
mais.truni.sk
rlgc.truni.sk
student.truni.sk
kybez.truni.sk
3point.truni.sk
webmail.truni.sk
ezp.truni.sk
sip.truni.sk
fmc.truni.sk
mais.truni.sk
remlabgrab.truni.sk
idmportal.truni.sk
rdweb.truni.sk
webmail.tvu.sk
idmportal.truni.sk
rdweb.truni.sk
indukcia.truni.sk
skype.truni.sk
pf.truni.sk
kybez.truni.sk
moodle.truni.sk
webmail.truni.sk

Certificate

The complete raw certificate details for ff.truni.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2V/8o/IUR/JDaHbIRP43
YAGQqM6XSi6IFEmP9p+OcHCg/hU7YttYPr5bgxQMObHeHq+zSY74PQH7AfgBshpw
c4ZWESl0GTpKm9xw+muwyZRtERJxpTdeSVktV9POSqi2b1SYC2ZI636S2dSS9zvK
Pihg92Q4uqCI83ZRz5VgyxSQyDMWNYmoAP81rITAdGmMUq+kYW3paainbAeuVm4p
YP9UOlmdLngMQnY7+JT/X/G8J4WpV6DV796GVlcBdqPyR6dx7x8v87jFko7eZD5X
zqknK26i9opzoaRFwcj8Bv+9Z655iFkIUfnZOwQAj6mC89i7ND93InEBnSUXPxyX
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 77335269206614052088603223107738331156
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trnavský kraj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trnavská univerzita v Trnave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ff.truni.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27441045070613012390467066593278634766484725059288152120855236068351885925094650015170806450777462581591768591373214654366196146741617728883505074110314710059259272421277128646659462325379670715947186825053115901635513491376162745373241189787638191074311787399941303871536351178286914932544910583278407253577303542494267905718920762920118759219674669361467900394595701079689851468177990825980632715552987437429334528061777530758651027613607415300412992336963583124936928725626625664963708967179501811069477610263259661652212211299098237977634568337542851072073167235872836481692795966604779807308829436475032890808129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a3734bebfd00840510c02a913f578f395ce0ba9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ff.truni.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ff.truni.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0015699f4a146e060ef9ddb5186f3304406e56ddeda45654b0a8aa51765db5e4252faba58497acae278fb2402b44f0f54ff21606a0005afd9ee7cce2264b9a3e212a16d4d3c6acbe90b74dd3b12ff2b854cd443c1d85c09459ab479987d13db6f8bbab027b84c05838e32130e7b4057081404af2a1e105a721b73a92c9e932270fa7853602fa781c8cfc7bf9fb14c2673bd896feed29e56055bc188a8b1e80010a150d514faefbde60180205b9bf7a174cd51482195a9b35dc2b29b675511fb56ef054451d377e96a8f3c706fa9e0465cc85f8d7bba51755f0245277f921bd473030c9b1725a7fe0e65d5b5bc76e05e7376bd5a88cdc8e4f9582fe4a8090bc4ba93a7558b1e4b524f7590cefc63dac5ec7ff3837c2f1ba68b69dca4f4300d165024036d523efa788a0597728478adfe50e9d768647bdd1651e2ea776bfede2ad96b7c5db86055767cc1e75652fd4a371c59285e7f511a8279fecae55183c0aec821e6c5a61ac64c490246b725dc3cba0403d256a2c2ec67ae5cf8fcaf5654a0557a044d1eaba73ca5f3dfe5bffe184fad9eeca9487c526bf480ae69cd108573cd58e467c106b8e33664ae54fa093739605cb8b05b02e308fe8f048900952a8b6a3493dbe3a35eecda743e24e3b1b316af24b40ad55f2df8103c8fdc44841a7d846de9acf1d78e6cedc671f0796cc5942db1bf1b56beb6e58bbac52f9f0053dc543