edition-humboldt.de

- Berlin-Brandenburgische Akademie der Wissenschaften -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 18:70:39:87:e2:de:22:d0:b5:19:ae:16:cd:c3:46:88 was issued on by GEANT Vereniging.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Berlin-Brandenburgische Akademie der Wissenschaften

Organization: Berlin-Brandenburgische Akademie der Wissenschaften
State / Province: Berlin
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 18:70:39:87:e2:de:22:d0:b5:19:ae:16:cd:c3:46:88
Serial Number (int): 32484176010355387376997796073714173576
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 1f:66:89:64:c9:5b:ed:ed:03:fd:2a:9a:9d:52:07:59:8c:78:c8:06
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 43:c0:6e:3d:6b:1a:65:fe:85:93:46:8b:17:dd:b9:76:58:a7:4a:bf
Fingerprint (sha256): 3e:f3:8a:f4:a2:96:50:07:40:1c:8b:b0:6c:87:4c:e0:b7:78:bc:00:d7:30:88:42:71:53:c2:6f:1b:1d:88:0a

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate edition-humboldt.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edition-humboldt.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edition-humboldt.de
api.edition-humboldt.de
www.edition-humboldt.de

Other certificates including the domain name edition-humboldt.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for edition-humboldt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32484176010355387376997796073714173576
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin-Brandenburgische Akademie der Wissenschaften'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edition-humboldt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 738435086768428906871175219930424061734669315617334298632542635872055024477554408158659767682079359159983384200921061721712454612082724482991309520998031430451502222325974893692002118563033231309486439563678522828390006345962971660204725603126752388312733819135968550034147025899020654621649516490884481768503479629854464925277907217312973328599757117089207209304002909759740704779608783222147511393891923100640289805963213870014738675141963109745717558236863083550283270470300189431300750330250387767335769365354526368606148781096563217157731600496129995272208807044693037653868209297946635972323135872281339415890949947482771441260372617259368987470741000429544515814124997022636758424443532499769819218139719458361734834403351608370768966002519909639096862468324121949297776924237978686316641099095343758097963714683631907678750208372943997465277480505400023542896471686467041516716008565560798792761423057540273295382554115229066388033312783621823645551881642072259013214925975678698592714684313451249843976984456364710251989644362421623404199787633550933407980866623515303937802893441468470526966813321479066581014419192620341159198364405353910772091979889523940158073844744715361131687886887063796243049970264802226800361868987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f668964c95beded03fd2a9a9d5207598c78c806
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edition-humboldt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.edition-humboldt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edition-humboldt.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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