*.nordakademie.de

- NORDAKADEMIE gAG Hochschule der Wirtschaft -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number da:64:a7:75:a3:eb:5c:60:d0:73:e5:10:b1:b6:2a:fd was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

NORDAKADEMIE gAG Hochschule der Wirtschaft

Organization: NORDAKADEMIE gAG Hochschule der Wirtschaft
State / Province: Schleswig-Holstein
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): da:64:a7:75:a3:eb:5c:60:d0:73:e5:10:b1:b6:2a:fd
Serial Number (int): 290294329249794557465884426593390439165
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9c:7a:2f:bc:29:41:8b:5c:9e:dd:14:46:e5:dc:f8:63:eb:04:52:5a
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 07:b7:76:7d:ef:6f:1e:00:67:cf:aa:77:ff:96:0e:7f:a6:fa:bf:78
Fingerprint (sha256): 65:8b:51:5e:61:04:fb:ac:78:c0:1a:79:bd:db:d2:ce:31:4b:b0:18:b3:3e:30:c9:8b:07:c3:81:8d:aa:43:d2

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.nordakademie.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nordakademie.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nordakademie.de
nordakademie.de

Other certificates including the domain name nordakademie.de

(limited to 100 certificates)
gitlab.nordakademie.de
it.nordakademie.de
awt10.nordakademie.de
*.nordakademie.de
gitlab.nordakademie.de
owa.nordakademie.de
merkur.nordakademie.de
ac.nordakademie.de
lx29.nordakademie.de
redmine.nordakademie.de
auswahltest.nordakademie.de
vpn.dmz.nordakademie.de
www.nordakademie-gs.de
nordakademie.de
trinity.nordakademie.de
lx02.nordakademie.de
marketing.nordakademie.de
lx09.nordakademie.de
merkur.nordakademie.de
nordakademie.de
cis.nordakademie.de
vpn.nordakademie.intern
www.nordakademie.de
*.nordakademie.de
ws17.nordakademie.de
lx29.nordakademie.de
lx07.nordakademie.de
lx19.nordakademie.de
bara.nordakademie.de
gitlab2.nordakademie.de
autodiscover.nordakademie.de
lx07.nordakademie.de
redmine.nordakademie.de
owa.nordakademie.de
api.nordakademie.de
merkur.nordakademie.de
gauguin.nordakademie.de
gauguin.nordakademie.de
auswahltest.nordakademie.de
merkur.nordakademie.de
*.nordakademie.de
bara.nordakademie.de
renoir.nordakademie.de
ws27.nordakademie.de
nordakademie.de
it.nordakademie.de
fbwiki.nordakademie.de
lx28.nordakademie.de
cis.nordakademie.de
nordakademie.de
zensus.nordakademie.de
cis.nordakademie.de
vpn.dmz.nordakademie.de
lx23.nordakademie.de
support.nordakademie.de
ws01.nordakademie.de
vdi.nordakademie.de
cis.nordakademie.de
redmine.nordakademie.de
it.nordakademie.de
vdi.nordakademie.de
merkur.nordakademie.de
redmine.nordakademie.de
online.nordakademie.de
lx28.nordakademie.de
owa.nordakademie.de
owa.nordakademie.de
auswahltest.nordakademie.de
www.nordakademie.de
ws28.nordakademie.de
vdi.nordakademie.de
download.nordakademie.de
moodle.nordakademie.de
shop.nordakademie.de
fbwiki.nordakademie.de
lx09.nordakademie.de
crm.nordakademie.de
piwik.nordakademie.de
merkur.nordakademie.de
gitlab.nordakademie.de
shop.nordakademie.de
lx29.nordakademie.de
moodle2.nordakademie.de
www.nordakademie.de
shop.nordakademie.de
brauer.nordakademie.de
nordakademie.de
cis.nordakademie.de
www.nordakademie.de
moodle.nordakademie.de
vpn.dmz.nordakademie.de
nordakademie.de
owa.nordakademie.de
lx26.nordakademie.de
it.nordakademie.de
cis.nordakademie.de
lx18.nordakademie.de
vpn.dmz.nordakademie.de
vdi.nordakademie.de
awt10.nordakademie.de

Certificate

The complete raw certificate details for *.nordakademie.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290294329249794557465884426593390439165
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schleswig-Holstein'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NORDAKADEMIE gAG Hochschule der Wirtschaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nordakademie.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 647481781819791798239516877768125013425900037132565412035626359325275803307263036725767418003373840606324101835445911722902680016227588337782658324019323324518259517478527502346696018071961949198483127122347014737646958419147807049938115232357497337264163487869955526395000896727671251720371093816028194403301386619848857277720451805068281839757658420150459396894159758775477397562174836137914466700821531962970800196367974730197743053384718916790557583637041148587048076517389862637680691953909035160864751572695606983496953474545126454410295525622321928873433136380700180816326374534883741625662844386311687471402450155644764128536171154059269232231692213904622108289843191738022480629299673770165718619282200038476856481737476057665195391480547831136749698716538095760642266996736804688278334770543309009692838424730403915253731516160830424557537494859822670585441151189442056836586271311260308176588125338242000823297797247097018341150725827435385380970150403348154398842022815802704181071991532927509725293124209680773749046241679655509721996353054742984030264381344483653510341395807417900180064855305118212829002094297274419495674129381484308053504470552892140679477140906323107982140024690915815521697120300201990895198890523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c7a2fbc29418b5c9edd1446e5dcf863eb04525a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nordakademie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordakademie.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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