cl.acc.hvaweb.formist.nl

- Stichting Hogeschool van Amsterdam -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 2d:4e:24:32:77:a0:83:5f:04:b2:ef:95:e5:9a:a2:59 was issued on by GEANT Vereniging.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stichting Hogeschool van Amsterdam

Organization: Stichting Hogeschool van Amsterdam
State / Province: Noord-Holland
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:4e:24:32:77:a0:83:5f:04:b2:ef:95:e5:9a:a2:59
Serial Number (int): 60220993130463552691715781325758308953
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 3e:7c:ca:e6:27:d4:f5:51:52:4a:43:62:55:18:f0:5c:82:80:10:4d
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 26:98:84:ec:c3:38:0c:4d:8b:ec:5e:3a:f1:55:63:3a:00:60:ca:2b
Fingerprint (sha256): 57:4c:a8:d7:19:67:b7:d2:6e:02:a3:17:2c:a2:d8:65:f7:06:82:00:6d:9a:ae:49:6c:e1:5a:cd:50:ec:d8:e0

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate cl.acc.hvaweb.formist.nl

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cl.acc.hvaweb.formist.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cl.acc.hvaweb.formist.nl
cms-acc.cms.hva.nl
cms.acc.hvaweb.formist.nl
graphql-acc.cms.hva.nl
graphql.acc.hvaweb.formist.nl
storybook-acc.cms.hva.nl
storybook.acc.hvaweb.formist.nl
www-acc.cms.hva.nl
www.acc.hvaweb.formist.nl

Other certificates including the domain name formist.nl

(limited to 100 certificates)
cl.acc.hvaweb.formist.nl
discovery.canvas-acc.awsuva.formist.nl
cl.tst.hvaweb.formist.nl
cl.trn.hvaweb.formist.nl
cl.acc.hvaweb.formist.nl
cl.trn.hvaweb.formist.nl
cl.tst.hvaweb.formist.nl
discovery.canvas-prd.awsuva.formist.nl
cl.tst.hvaweb.formist.nl
cl.acc.hvaweb.formist.nl
discovery.canvas-acc.awsuva.formist.nl
cl.prd.hvaweb.formist.nl
cl.prd.hvaweb.formist.nl
cl.acc.hvaweb.formist.nl

Certificate

The complete raw certificate details for cl.acc.hvaweb.formist.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TzPZ6yo0CJjJRdg8ZFe
bMKsE0WWEJPSWKfnF7gUMHeKGZYDAxQzXRdy/jbTur8F9kPPbnsbW6NzTt0PAiCc
KsJHjRYwVfdAOlieG8v5xzDLICmcstQVbE16129QjO4vqbXykERGG3aZq+3eib+5
x+uTahD5XI/EdyMzdKtA7uKYUU/zDsSCgLE1f2jV7KJM2DaTaRuBMwz879BuX0gS
GdVhtQ3y1m2rAc+Otv6IxTZzPQpkDBqjAmTAzlZmVBgT7h2Yw5Om0Oe0oyxjw6dx
zgoNybMjktWpnkVX63CABe6XpW1i0MggbNHp0r1uGHgFThssvu78QbMdRcx073M8
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 60220993130463552691715781325758308953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Hogeschool van Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cl.acc.hvaweb.formist.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29948464892208331434158197495883239081557004157333372405392290789043771802666198063838892945685486677185336120969816317385521085729325570665904969967422563049100897749365569613690193937677156451431068588488378429156805994663853208981689283013479439068689800510671411828080209335101580385200915964823633678413968314253277642539360716570016803795962151559021499512997466796846932345714151498114943313727114744715971073568714201042596588868634272820645275157983705977937029593830487823289757644745103134149399382475143583997746075477903129895864059473000419802455045584834992568632184085584074330806750415027178099129411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e7ccae627d4f551524a43625518f05c8280104d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018331d55922000004030046304402202654b092e4a7ef6c2a972cfb87743a9c99242c7ab4de8bf809188fc82ab7a07002207499df750bb8b912e56ebdc67de6cc90f0fd1ee84de37fd52c989f18da1c19340075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018331d558ee000004030046304402203c2b1efc7dabea25f525d01408d0f6b049981e0a76b5557b3ab0ba1548fd8a7702206bc03aa57720ccbba8893d458c4e8c300dc440faa70bbc19fbd51ceafd33ee7a007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018331d558be0000040300483046022100fb623ea72a115ce8d6dcd7427d5892804cbaa662e3a85db830bfc458b69ceb13022100f31f4f334b3e37fb50533ed3ed0a1c904fefb5ad0cf311225dde129f4d412076
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (237 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cl.acc.hvaweb.formist.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-acc.cms.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.acc.hvaweb.formist.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphql-acc.cms.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphql.acc.hvaweb.formist.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storybook-acc.cms.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storybook.acc.hvaweb.formist.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-acc.cms.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acc.hvaweb.formist.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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