neptunweb.semmelweis.hu

- Semmelweis Egyetem -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 02:3a:e8:1d:75:8e:c4:ff:d8:6f:5e:ed:f0:8d:a2:d5 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Semmelweis Egyetem

Organization: Semmelweis Egyetem
Locality: Budapest
Country: HU

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 02:3a:e8:1d:75:8e:c4:ff:d8:6f:5e:ed:f0:8d:a2:d5
Serial Number (int): 2964317062391955768295348923376968405
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 30:fa:1e:09:e7:ac:f4:f4:07:51:18:fb:2d:d1:40:b6:01:1d:b8:1b
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 72:ee:f3:1f:83:fb:56:af:c8:b3:20:95:92:cd:2e:28:58:d2:74:35
Fingerprint (sha256): 78:6b:0b:42:a7:bf:f5:9f:d4:88:96:9f:33:95:97:39:74:d7:f4:a3:19:2b:f2:8a:9b:a5:99:15:cf:30:98:3e

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate neptunweb.semmelweis.hu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for neptunweb.semmelweis.hu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

neptunweb.semmelweis.hu

Other certificates including the domain name semmelweis.hu

(limited to 100 certificates)
etarhely2.semmelweis.hu
nsp.semmelweis.hu
ealairaskezelo.semmelweis.hu
neptunweb.semmelweis.hu
mail.semmelweis.hu
archiv-etarhely.semmelweis.hu
bep.semmelweis.hu
mobilsync02.semmelweis.hu
vibe.semmelweis-univ.hu
emk.semmelweis.hu
itc.semmelweis.hu
klinpacs.semmelweis.hu
emk.semmelweis.hu
bep.semmelweis.hu
nkkh.semmelweis.hu
emk.semmelweis.hu
ikrek.semmelweis.hu
ejegy.radi.semmelweis.hu
emk.semmelweis.hu
mail.semmelweis.hu
emk.semmelweis.hu
bifilab.semmelweis.hu
ikrek.semmelweis.hu
bd4bo.org
emk.semmelweis.hu
eesztoktatas.semmelweis.hu
emk.semmelweis.hu
neptun.sote.hu
neptun1.semmelweis.hu
bep.semmelweis.hu
bep.semmelweis.hu
tesztetarhely.semmelweis.hu
vikote2.vikote.hu
e-learning.semmelweis.hu
nkkh.semmelweis.hu
bd4bo.org
bd4bo.org
neptunweb.semmelweis.hu
casecenter.semmelweis.hu
emk.semmelweis.hu
lists.semmelweis.hu
e-orvoskepzes.semmelweis.hu
bd4bo.org
emailigenylo.semmelweis.hu
ekg.semmelweis.hu
neptun2.semmelweis.hu
lib.semmelweis.hu
mobilsync01.semmelweis.hu
bd4bo.org
mobilsync01.semmelweis.hu
bd4bo.org
jelszocsere.semmelweis.hu
xenia.sote.hu
bd4bo.org
mobilsync.semmelweis.hu
semaphor.semmelweis.hu
eesztoktatas.semmelweis.hu
itc.semmelweis.hu
lib.semmelweis.hu
seka.semmelweis.hu
mobilsync01.semmelweis.hu
calendar.semmelweis.hu
neptunweb.semmelweis.hu
neptunweb.semmelweis.hu
sfr.semmelweis.hu
feedback.semmelweis.hu
bep.semmelweis.hu
itc.semmelweis.hu
emk.semmelweis.hu
neptunweb2.semmelweis.hu
mobilsync02.semmelweis.hu
radpacs.semmelweis.hu
bd4bo.org
mail.semmelweis.hu
emk.semmelweis.hu
emk.semmelweis.hu
semmelweis.hu
mail.semmelweis.hu
neptunweb2.semmelweis.hu
net-tar.semmelweis.hu
eduroam.semmelweis.hu
net-tar.semmelweis.hu
lib.semmelweis.hu
bep.semmelweis.hu
neptunweb.semmelweis.hu
bd4bo.org
bd4bo.org
vikote2.vikote.hu
mail.semmelweis.hu
itc.semmelweis.hu
baleset.semmelweis.hu
evasys.semmelweis.hu
casecenter.semmelweis.hu
itc.semmelweis.hu
bep.semmelweis.hu
xenia.sote.hu
bd4bo.org
nkkh.semmelweis.hu
seka.semmelweis.hu
bd4bo.org

Certificate

The complete raw certificate details for neptunweb.semmelweis.hu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXt80oosWaLVNeRCWS0p
fjmM3zQRgyBs18YhvzId/+3dFo+AzgkiUwf1+uNYMvJ4E/UeqdSmMh3M0ZUtqDkI
M0lAachTKv1frE1oMEUhg1wMC6V3c9l2NBD585LqKHRxemNtkiDNEMI65/c/WIoR
RmRgT8dw9XUCD7LRbV9kbDaz0qeGXPIurrm0EhRXctH/GzBB9mxbKhhPOS/SjH0k
5w/SShlt0u6Ufhpi88ncVddg+/wriDbNk/ASzASHp9K1mk49wBl+l8ya3JVK3TUz
tX6RCEB6idu3emdIkenCl82bWOH6vC1XmXiuJjSQwI/CbEamoeNzw0fALNj6Qy+v
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2964317062391955768295348923376968405
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-06 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Budapest'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Semmelweis Egyetem'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'neptunweb.semmelweis.hu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21900120758114987377249891186956799975807861784727661386771456190734951402796603201182764500604820247021806059651737783677708774648207488336225191446425871704603871195458915677054015925276194884884618892647422256552169960704703668281937760176005409922256370208250251709463635679389907729585256437359117608101259394572390770049234899413134838774291075106041006228242072208187996635127793721962271053802324079208275313489727405548132950865804300448612767539970549519525924662509429844191915868844071620130468449147027377912941991972922685224489606623314569957202244307610719142858456699849064429066753593767522533879599
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30fa1e09e7acf4f4075118fb2dd140b6011db81b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neptunweb.semmelweis.hu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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