oim-prd-be.lb.uha.nl

- Universiteit van Amsterdam -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 8e:a7:b3:de:62:91:c0:3c:7b:85:4a:db:da:d0:36:36 was issued on by GEANT Vereniging.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universiteit van Amsterdam

Organization: Universiteit van Amsterdam
State / Province: Noord-Holland
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 8e:a7:b3:de:62:91:c0:3c:7b:85:4a:db:da:d0:36:36
Serial Number (int): 189621137147310234998399923678037947958
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f1:e8:cf:a7:c8:eb:e4:70:10:81:27:fd:4d:ef:ac:ff:db:cd:b0:ef
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 0e:01:7b:1a:6f:2f:a5:df:c7:83:a2:ba:be:87:8b:4c:3c:2e:74:71
Fingerprint (sha256): 6d:ab:f9:ab:e1:e9:88:43:74:ba:be:93:1a:70:a0:fd:c0:63:e5:cf:36:00:f2:be:50:4e:96:57:de:7a:1d:50

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate oim-prd-be.lb.uha.nl

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oim-prd-be.lb.uha.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oim-prd-be.lb.uha.nl
idm-beheer.ic.uva.nl
idm-beheer.ict.hva.nl

Other certificates including the domain name uha.nl

(limited to 100 certificates)
radius-acc-authus1.net.uha.nl
vpn-acc-dc-01.net.uha.nl
ex2016-prd-hva.lb.uva.nl
beheervpn-prd.net.uha.nl
ex2016-acc-hva.lb.uha.nl
ex2016-prd-uva.lb.uva.nl
hva.nl
netauth-prd1.net.uha.nl
infoblox.net.uha.nl
authus-acc.net.uha.nl
vpn-dc-01.net.uha.nl
ex2016-acc-uva.lb.uha.nl
netdisco-acc1.forux.nl
radius-prd-authus1.net.uha.nl
netauth-prd.lb.uha.nl
netauth-prd1.net.uha.nl
netauth-prd.lb.uha.nl
fortimanager.net.uha.nl
lb-dc-1.net.uva.nl
ex2016-prd-hva.lb.uha.nl
lb-dc-1.net.uva.nl
fw-gbs-01.net.uha.nl
ex2016-prd-uva.lb.uva.nl
ex2016-prd-hva.lb.uva.nl
iris.ic.uva.nl
oim-prd-be.lb.uha.nl
ex2016-prd-hva.lb.uha.nl
netauth-prd2.net.uha.nl
smtp-prd.lb.uha.nl
authus-prd.net.uha.nl
netauth-prd2.net.uha.nl
ex2016-acc-hva.lb.uha.nl
radius-prd-authus1.net.uha.nl
radius-acc-authus2.net.uha.nl
fortimanager.net.uha.nl
oim-acc-be.lb.uha.nl
smtp-prd3.forux.nl
smtp-prd.lb.uha.nl
hva.nl
radius-prd-authus2.net.uha.nl
netauth-prd1.net.uha.nl
radius-acc-authus2.net.uha.nl
ex2016-prd-uva.lb.uva.nl
authus-dev.net.uha.nl
smtp-prd3.forux.nl
authus-acc.net.uha.nl
authus-prd.net.uha.nl
radius-prd-authus2.net.uha.nl
lb-dc-1.net.uva.nl
nf-store.ic.uva.nl
ex2016-prd-uva.lb.uva.nl
radius-acc-authus1.net.uha.nl
netauth-prd1.net.uha.nl
fortianalyzer.net.uha.nl
netauth-prd.lb.uha.nl
hiab-prd1.mgmt.uha.nl

Certificate

The complete raw certificate details for oim-prd-be.lb.uha.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 189621137147310234998399923678037947958
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universiteit van Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oim-prd-be.lb.uha.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 653109811256601598153946938061443733000377438494611222187912855902190030031305859898902834868892527823783286236667414687559459826098255075228843766907178046737380867985189789201573373414237933376352833829025507779208651332052407255346498177729144226847655192777307844554366051341750184838090718491161822119371666850738453604363241845105528940673283441012443215473429112465666800132931481943903107922006005656555320067623474518197763628126268371945520645075978734471806760081055381135293846739130030384917452981406994583813048473236635574519079600853183623980593302673369050609774398945097743224526225116476970609582875896732355403676028574950743227009118045147923724067815838974435006892983538071433525100280470352979228466909710724464253185005933060860653824158073577907138052634584228030795786628612402466760434840261180856936578841217625018960485153941417732456212333524201186569699592398575765845442467999784317353175331060455192293098003502669206734347375386513373695026600799182784866028376381264707225579300206899838560276858957127994835926351270164102513390852577210085918857087870291070686765343853495016138049082429220337246728248104602516261908021670763932417634479046844054764579014097593803518457033023466623925531162983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1e8cfa7c8ebe470108127fd4defacffdbcdb0ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oim-prd-be.lb.uha.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idm-beheer.ic.uva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idm-beheer.ict.hva.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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