www.sh.se

- Södertörns högskola -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 0d:ac:35:97:6c:9a:e1:ce:46:70:03:c8:8c:a6:f9:4e was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Södertörns högskola

Organization: Södertörns högskola
State / Province: Stockholms län
Country: SE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:ac:35:97:6c:9a:e1:ce:46:70:03:c8:8c:a6:f9:4e
Serial Number (int): 18174125969645051866793589091181459790
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3a:e2:3d:4c:a0:b0:b6:fd:5c:f7:52:96:11:73:7b:95:2c:0f:d0:97
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): df:f1:5c:75:fb:16:a8:0e:ca:33:ac:7a:bc:fc:e5:4c:90:bb:1a:be
Fingerprint (sha256): 78:1b:50:dd:22:01:19:20:fb:7f:a8:45:b0:07:de:f0:a3:b7:64:53:99:e8:fb:f2:eb:40:15:ae:a1:5d:81:fe

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.sh.se

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sh.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sh.se
sh.se

Other certificates including the domain name sh.se

(limited to 100 certificates)
www.sh.se
ssd04.web.sh.se
graduateland.com
webappl.web.sh.se
*.till.biblextern.sh.se
bibl.sh.se
usersync.errai.sh.se
earkiv.sh.se
graduateland.com
rad1.eduroam.sh.se
*.bibl.sh.se
api.bibl.sh.se
graduateland.com
careergate.sh.se
careerland.dk
careergate.sh.se
play.sh.se
graduateland.com
webappo.web.sh.se
dubhe.suni.se
support.mi.sh.se
primula.sh.se
graduateland.com
graduateland.com
graduateland.com
graduateland.com
mob01.web.sh.se
av.sh.se
spk03.web.sh.se
graduateland.com
*.bibl.sh.se
kvalitet.sh.se
ssd02.web.sh.se
career.cphbusiness.dk
graduateland.com
career.cphbusiness.dk
primula.sh.se
career.cphbusiness.dk
*.till.biblextern.sh.se
api.sh.se
blogg.sh.se
career.cphbusiness.dk
graduateland.com
terebellum.suni.se
www.sh.se
career.cphbusiness.dk
careerland.dk
graduateland.com
primula.sh.se
*.bibl.sh.se
blogg.sh.se
career.cphbusiness.dk
bibl.sh.se
api.sh.se
careerland.dk
dubhe.suni.se
primula.sh.se
career.cphbusiness.dk
career.cphbusiness.dk
info.web.sh.se
apputv.sh.se
www.sh.se
itsl.bibl.sh.se
bibl.sh.se
api.sh.se
kronox-test.sh.se
student.web.sh.se
bibl-app.sh.se
*.till.biblextern.sh.se
graduateland.com
app.sh.se
rad2.eduroam.sh.se
careerland.dk
career.cphbusiness.dk
webappl.web.sh.se
apptest.sh.se
*.bibl.sh.se
www.sh.se
*.mi.sh.se
faktaassistenten.sh.se
faktaassistenten.sh.se
careergate.sh.se
www.sh.se
dubhe.suni.se
blogg.sh.se
itsl.bibl.sh.se
sim01.web.sh.se
apptest.sh.se
career.cphbusiness.dk
career.cphbusiness.dk
www.sh.se
graduateland.com
blogg.sh.se
*.web.sh.se
www.sh.se
bibl.sh.se
bibl.sh.se
api.sh.se
faktaassistenten.sh.se
student.mi.sh.se

Certificate

The complete raw certificate details for www.sh.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod08WqFCrkLXPN363jMO
4ncPkUSU9QHVb5ZOwuPSDmpEQHtdapozGOw/srAs2tVRi8HbegczUdtQU6bKS/9H
k+cvwBdQfVYqi0IX5VBURvwVSHH7wGvcSo7iyTaTSXSlRyGCe/ft5vcN11NI4Uzx
EpKPwarkFuGjnq/844ZD8k6K+PYRfnFjv493SpFej95ALPWrbCObbXkL7XXWdmEi
XDLmGearWL7e4deBGDKFCbarw8SxTIu33o20C1jIyvkrYHsIqQqf6qf73Anb4HgS
n8Oj9iTq6ATS9u7xgLIF2DJImZBCNQ1Ritj0jsRd25XC8XqzPGJJO+hE6nDO2VBT
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18174125969645051866793589091181459790
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stockholms län'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Södertörns högskola'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sh.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20433462517799274058084908797521728768573707983014738974183134882852972542158493893605193174876248594298515502117146127859277399900577055660440312660568416839814518701990560825076149715880490173787336935545477886204127386869228767966224170871305037261146914227968151845167626821888232242874610870147151413015856734603619099711263622264802047613502803096751536706835366047280523476715921543798659435671028974457047471372193140426257090453440309722930961553760422318808289095763371328647371802624112955196939712184175586817403343758422139445002604007834910916171944116015695082677891128988263209489663345875298181731201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ae23d4ca0b0b6fd5cf7529611737b952c0fd097
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sh.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sh.se'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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