open.vu.nl

Issued by TERENA SSL CA 2

About this certificate


This digital certificate with serial number 2f:0b:37:66:19:c5:95:90:20:ec:16:b1:3a:9d:99:8a was issued on by TERENA .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

open.vu.nl

Organization unit: Domain Control Validated

TERENA

Organization: TERENA

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 2f:0b:37:66:19:c5:95:90:20:ec:16:b1:3a:9d:99:8a
Serial Number (int): 62531954689111696350535617844116035978
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 3d:f6:de:7c:d3:1d:8a:49:c7:fb:58:39:9f:e3:17:ed:9f:58:b9:75
AuthorityKeyId: 5b:d0:8a:1c:9a:32:5b:e0:b5:dd:96:54:1b:e1:86:28:b0:fd:b6:bd

Fingerprint (sha1): 39:1a:72:f7:b1:01:09:21:c8:d1:be:1d:9d:64:fa:a1:35:93:61:09
Fingerprint (sha256): a7:55:4e:92:29:01:2d:ef:2c:db:f0:be:6e:88:ec:6e:8e:a7:2b:b7:02:b2:f4:25:fc:7c:ac:74:15:f4:66:cf

Issuing Certificate URL: http://crt.usertrust.com/TERENASSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TERENASSLCA2.crl

Check the revocation status for the current certificate on open.vu.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: open.vu.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgIQLws3ZhnFlZAg7BaxOp2ZijANBgkqhkiG9w0BAQsFADBk MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg Q0EgMjAeFw0xNTAxMDYwMDAwMDBaFw0xODAyMDEyMzU5NTlaMDgxITAfBgNVBAsT GERvbWFpbiBDb250cm9sIFZhbGlkYXRlZDETMBEGA1UEAxMKb3Blbi52dS5ubDCC AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKglOAa28NgogSxYxsgo7Dwd rRUpUofTIR1n1WtvfBzhn8OndMJf/mAnUwePpgmg4ukTgtWCMcR9vt6d5XoN5Ri7 EEA2x6JB1tfGfniLmO2MC4F1x+0ebNMXbXTuERhMBKFaaYiAir1ig3BFKZQyG9Jp Qi5GdGl8fhe9IOjIxZEiJtpcpQDoDikweYayU7yD+edLXfpR0T7Hxi4rvZcjhyHq jr+qp/Y7r48ncmNgY6lkHaaXJosXr10O8UeB1le2L0fE0LPkrShfKjRG+eJ7y214 y4ccBcQ4CJoKlcjXcZfn/qlCtmmlxpCfvSsWhxrHFa/4r9oR/raEDXWrE946Q/T5 t7+Ib0/TVAa7x6ZVMur9NZwj1HCZ0lJd+dHbOWz0tQaC9Rzfrf0ga1Dywgm7r6v4 hg52MArGeVh5YePLMTW9s7RXYavNeg4SNHone9/bbS/OUMsY4pj2RbiGVZIB26kH o/+NLhHsnDEkoEXrhYGpAMiTktEIRfz6lY3LZTXSwl+RCS7v4EHxheLECCMiPqsI praHpZKWsYCabcQAGs2TqTDnUVMxR3M8tjxkgpAdoViKHCkvf7TaulLo8YYuUOMt JuHmbuf/gkh3UQf29QpaZaMgSOZdtAa3JWLttPSd8Mixf8wav2RS3zsm9nhLpZwe Ojq6dzHOtFo2YZ76/g6JAgMBAAGjggFmMIIBYjAfBgNVHSMEGDAWgBRb0IocmjJb 4LXdllQb4YYosP22vTAdBgNVHQ4EFgQUPfbefNMdiknH+1g5n+MX7Z9YuXUwDgYD VR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMCIGA1UdIAQbMBkwDQYLKwYBBAGyMQECAh0wCAYGZ4EMAQIBMDoG A1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9URVJFTkFT U0xDQTIuY3JsMGwGCCsGAQUFBwEBBGAwXjA1BggrBgEFBQcwAoYpaHR0cDovL2Ny dC51c2VydHJ1c3QuY29tL1RFUkVOQVNTTENBMi5jcnQwJQYIKwYBBQUHMAGGGWh0 dHA6Ly9vY3NwLnVzZXJ0cnVzdC5jb20wFQYDVR0RBA4wDIIKb3Blbi52dS5ubDAN BgkqhkiG9w0BAQsFAAOCAQEAJgfUAxOziQJ7tT0Ow7VCYmlcHi943G04iq8bV6N/ eiditocr9SlCZzHJYsgkExRMf539BaUCaPD1djqV+hJn79MElc6Estc8jXvFxprA pBI2mbvA4tvXBWS/wlszoy3sJ/J80HdWu1C51eh9+58i28HwSxvQ21yMXcq3SxIL JnUbpXttrXJRrLBpp9zDI1Vuu0CZGqyMDHI9QNdamcWfPlrApRexJGuWaIxCo1Ve 7nRa5KWLV0wnHCMi+2vGanegWtRxRsrYE+Rj7FH1nWGH8noXEP4z0aPm4PTXq1ST 7dLUFxCMla+B3yRpN34Q/l+EtH0Ks3Vx2iGf01+8+X/8qA== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqCU4Brbw2CiBLFjGyCjs PB2tFSlSh9MhHWfVa298HOGfw6d0wl/+YCdTB4+mCaDi6ROC1YIxxH2+3p3leg3l GLsQQDbHokHW18Z+eIuY7YwLgXXH7R5s0xdtdO4RGEwEoVppiICKvWKDcEUplDIb 0mlCLkZ0aXx+F70g6MjFkSIm2lylAOgOKTB5hrJTvIP550td+lHRPsfGLiu9lyOH IeqOv6qn9juvjydyY2BjqWQdppcmixevXQ7xR4HWV7YvR8TQs+StKF8qNEb54nvL bXjLhxwFxDgImgqVyNdxl+f+qUK2aaXGkJ+9KxaHGscVr/iv2hH+toQNdasT3jpD 9Pm3v4hvT9NUBrvHplUy6v01nCPUcJnSUl350ds5bPS1BoL1HN+t/SBrUPLCCbuv q/iGDnYwCsZ5WHlh48sxNb2ztFdhq816DhI0eid739ttL85QyxjimPZFuIZVkgHb qQej/40uEeycMSSgReuFgakAyJOS0QhF/PqVjctlNdLCX5EJLu/gQfGF4sQIIyI+ qwimtoelkpaxgJptxAAazZOpMOdRUzFHczy2PGSCkB2hWIocKS9/tNq6Uujxhi5Q 4y0m4eZu5/+CSHdRB/b1ClployBI5l20BrclYu209J3wyLF/zBq/ZFLfOyb2eEul nB46Orp3Mc60WjZhnvr+DokCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 62531954689111696350535617844116035978 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'open.vu.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 685973327140834955863359877601367463866941115949437540834218846315425353992440702473830121336047382894420115993776966746664860362505594876054283847029223830351842059055838478683284082258585042573581978557287422587797061578633354706226707761366133830299765070024016597758350051982578893719688041641672711450788195812104566545786388179800536554740739690577327851856397495103908540111546340608691574767681264046930704784076438289477585716684245745023813336871168246182138906497822167219016052391440532256746401481396925376014158156494769217578819659583954337097246414251443849229658315475699109495006256941585369406658728123152655183165697674096213801266920508762266434239817230225933472169753550737723782764661343244891680672728179062580575840884356736242495926449878432678325280999794592230814305314873472119189917965980645530478081079426244435420142291912060188715111938899445610172803557764188454137200165156428215202854761701330447175047133261653365548499981480603211858175764309464570075252102014669640793287277423279525192958860833518790829818693033246954946211207111492028603027071843974831296445365277887224975575889881909306281042377928744381873598079493280558688080422302839122733152347366266710392442486209687796552216481417 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5bd08a1c9a325be0b5dd96541be18628b0fdb6bd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3df6de7cd31d8a49c7fb58399fe317ed9f58b975 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TERENASSLCA2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TERENASSLCA2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.vu.nl' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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