gezondeschool.nl

- Rijksinstituut voor Volksgezondheid en Milieu (RIVM) -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 39:0a:9e:9c:22:7a:f8:c1:33:6f:02:71:f6:4c:ed:71 was issued on by GEANT Vereniging.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Rijksinstituut voor Volksgezondheid en Milieu (RIVM)

Organization: Rijksinstituut voor Volksgezondheid en Milieu (RIVM)
State / Province: Utrecht
Locality: Bilthoven
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 39:0a:9e:9c:22:7a:f8:c1:33:6f:02:71:f6:4c:ed:71
Serial Number (int): 75821135719307436215700214358580456817
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 21:65:c7:f3:ae:2b:28:53:27:14:bc:70:ff:c7:ae:e2:d1:3e:fc:bc
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): ee:ef:44:65:0f:64:49:8b:b4:46:43:66:1b:25:68:d5:37:90:9a:92
Fingerprint (sha256): 75:44:17:a6:12:34:8d:06:7f:3e:a2:ac:fb:24:9a:ce:56:31:1e:7f:2f:b9:cc:29:c4:3c:6b:ec:2b:84:b3:e3

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate gezondeschool.nl

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gezondeschool.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gezondeschool.nl
sub.gezondeschool.nl
www.gezondeschool.nl

Other certificates including the domain name gezondeschool.nl

(limited to 100 certificates)
gezondeschool.nl
gezondeschool.nl
acceptatie.drupal.gezondeschool.nl
drupal.gezondeschool.nl
gezondeschool.nl

gezondeschool.nl
www.loketgezondleven.nl
test.gezondeschool.nl
acceptatie.drupal.gezondeschool.nl

gezondeschool.nl
acceptatie.drupal.gezondeschool.nl
www.loketgezondleven.nl
www.loketgezondleven.nl
test.gezondeschool.nl

Certificate

The complete raw certificate details for gezondeschool.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TWuvqemltGW0vm8xPz7
Y/0+QwNIN0WoSAh2svuOML3XhYACsA2wkDMfCBJcOu86ueb2U03p0m5KenSkl4b0
3aiZjlmXP9uTIWUuwnD4rb8j4p1Q2YWNOga9W4oBDoZhzoSU8MsLR4UXKV/qVmjc
TyPTwrn0PLbU8zgF4ed7PKrHvz0khhx8GFJbq2LggpN5VhOXkj3zs+YjJBmXmUFA
Nl/hlI2Ghq/+vIRIVEJVON9hB/iUak56gbK7dNKXmrOLAzwrIQeRH8iU35p2TO3G
HPaTtfcH+vDgcgyhpFzJDRcbQmf5oxpX49Zw2xIADJ3jAIYR5sKQPctV8/74n1tm
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 75821135719307436215700214358580456817
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utrecht'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bilthoven'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rijksinstituut voor Volksgezondheid en Milieu (RIVM)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gezondeschool.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26410277612940915727504707972670724505710403610204539828575985274867973087526541900124277080915758541591229359269911562254493060458082037683286595626920938595692386398267549247273357401918462418593767200540985823148736237568077766180563976083767375888400107161984560698755301366539561426945211203835290599710528401781876272702523417679220672058241562546947712918075685052606673380338664518250229123047236541369847705265698740756968130800694806785153308956054686667542022550399747639702476496887147714230642709913571223920672599650231478097118208859680212024503478358975111130429311920778215233160924607190626666768019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2165c7f3ae2b28532714bc70ffc7aee2d13efcbc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gezondeschool.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub.gezondeschool.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gezondeschool.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		004f76649e273c85bd232cbff9465b4a7b5df314ebad2ae500f1ec834bab01a0ec4893529ff4912beb07526c7f23fc2456d6ffbad742ba3f0d001f6c0fd963fdd17e32980e4da002e36d4cdc990df8bff5886f75c82eee93c43e7666895d11035fc915309cba014fde3e7e25a8c4a2dc52633bd25b0884d0b076e4ddec8d876ef8f268ac47c9dd93f2e05011d43db3b7446bcfd53320e636ed01cc8608492a21c14313eb7eb7cb90a0d81ee9c9bca9a202d5c99a8a89fdf57b6e0c267e5dfe2a5f44579777744b56a2645b27fd17ae228a876ccf0e7afc77402edf2648be14f0dc38aa6f20215f0bc944c5056733efa266ceb7253f41e4479ae7b6cb0327fa97da5c39da792967631506b0b968b3f09fa55f61d443e27e597401d88ae288c970592f7f4c10000b3cab128a3f8b8f9e804840df527276a18a49737469295eac7921e03cd613c3a8bb1a64ac0e897efaf8e7308afa31b3190b6488d50a42850d80a5a41331fce1339088f56b106d9448fd548182075272977218272e1293afb05f0c93384b24cdd169b5fa908dc2774d0b22c44ed1a081722868d088d5e9852a0ec06410a50f5d88bdb641f1e48b0f6a9b1dd76ebbcdaa6db47bc644598789f79990e5a299926e5edf94f0859c3e7348217544e59f0ce95f90900a8cc61c70c742c670dc333133ba6cc361f35a5853146570f4505f585f7ce57b723efd103d9a83ad