eduroam.semmelweis.hu

- Semmelweis Egyetem -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0b:0b:65:fc:7a:68:7c:c8:f7:c1:89:d0:5c:70:18:63 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Semmelweis Egyetem

Organization: Semmelweis Egyetem
Locality: Budapest
Country: HU

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:0b:65:fc:7a:68:7c:c8:f7:c1:89:d0:5c:70:18:63
Serial Number (int): 14680691745828368883271017690540546147
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7a:87:e7:0c:2f:d7:0b:9c:3e:98:2f:2d:9e:76:cc:51:5e:a9:2f:01
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 5d:a1:e3:ea:74:26:2c:1d:85:05:8c:71:1d:43:81:61:3a:33:d6:1b
Fingerprint (sha256): 95:f8:6c:e1:57:ec:12:f5:b2:8a:97:02:ad:9d:1a:2c:90:47:32:1c:6f:23:5c:26:b5:5e:9d:77:46:03:f3:6d

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate eduroam.semmelweis.hu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eduroam.semmelweis.hu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eduroam.semmelweis.hu

Other certificates including the domain name semmelweis.hu

(limited to 100 certificates)
etarhely2.semmelweis.hu
nsp.semmelweis.hu
ealairaskezelo.semmelweis.hu
neptunweb.semmelweis.hu
mail.semmelweis.hu
archiv-etarhely.semmelweis.hu
bep.semmelweis.hu
mobilsync02.semmelweis.hu
vibe.semmelweis-univ.hu
emk.semmelweis.hu
itc.semmelweis.hu
klinpacs.semmelweis.hu
emk.semmelweis.hu
bep.semmelweis.hu
nkkh.semmelweis.hu
emk.semmelweis.hu
ikrek.semmelweis.hu
ejegy.radi.semmelweis.hu
emk.semmelweis.hu
mail.semmelweis.hu
emk.semmelweis.hu
seka.semmelweis.hu
bifilab.semmelweis.hu
ikrek.semmelweis.hu
bd4bo.org
emk.semmelweis.hu
eesztoktatas.semmelweis.hu
emk.semmelweis.hu
neptun.sote.hu
neptun1.semmelweis.hu
bep.semmelweis.hu
bep.semmelweis.hu
tesztetarhely.semmelweis.hu
vikote2.vikote.hu
e-learning.semmelweis.hu
nkkh.semmelweis.hu
bd4bo.org
bd4bo.org
neptunweb.semmelweis.hu
casecenter.semmelweis.hu
emk.semmelweis.hu
lists.semmelweis.hu
e-orvoskepzes.semmelweis.hu
bd4bo.org
emailigenylo.semmelweis.hu
ekg.semmelweis.hu
neptun2.semmelweis.hu
lib.semmelweis.hu
mobilsync01.semmelweis.hu
bd4bo.org
mobilsync01.semmelweis.hu
bd4bo.org
jelszocsere.semmelweis.hu
xenia.sote.hu
bd4bo.org
mobilsync.semmelweis.hu
semaphor.semmelweis.hu
eesztoktatas.semmelweis.hu
itc.semmelweis.hu
lib.semmelweis.hu
seka.semmelweis.hu
mobilsync01.semmelweis.hu
calendar.semmelweis.hu
neptunweb.semmelweis.hu
neptunweb.semmelweis.hu
sfr.semmelweis.hu
feedback.semmelweis.hu
bep.semmelweis.hu
itc.semmelweis.hu
emk.semmelweis.hu
neptunweb2.semmelweis.hu
mobilsync02.semmelweis.hu
radpacs.semmelweis.hu
bd4bo.org
mail.semmelweis.hu
emk.semmelweis.hu
emk.semmelweis.hu
semmelweis.hu
mail.semmelweis.hu
neptunweb2.semmelweis.hu
net-tar.semmelweis.hu
eduroam.semmelweis.hu
net-tar.semmelweis.hu
lib.semmelweis.hu
bep.semmelweis.hu
neptunweb.semmelweis.hu
bd4bo.org
bd4bo.org
vikote2.vikote.hu
mail.semmelweis.hu
itc.semmelweis.hu
baleset.semmelweis.hu
evasys.semmelweis.hu
casecenter.semmelweis.hu
itc.semmelweis.hu
bep.semmelweis.hu
xenia.sote.hu
bd4bo.org
nkkh.semmelweis.hu
seka.semmelweis.hu

Certificate

The complete raw certificate details for eduroam.semmelweis.hu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC/q7hl8mAfYbR6Y2fk7
UQHtZ7PShOhEorQ6znFuOWVxaBXFmXkEmVCva3PellyOpcsj4KnmIY28apWMHe2P
nNPTmud7tUP5gtTQumb10bbPWQVp2as05a7u8+wJjjaJwnU83MSoEZu0k4dm7g+7
KjG71j7KuWbmah4HFOFcH08mi+juQrm5LogJYkU76PNtE9aWDl8Bnj0mL6mz1zy0
kFXBk0+y+FPqwxQhHz+gh6QWsotxMLmHLLkKD7lXSdxbQexRnOWiEgNQohr1Eyok
8NLWjtznIh3p/iuRa0IGWZ+aYyyF6evyXGwGifsqjk6gIZ0AKkh4gEbNhwXDaebU
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14680691745828368883271017690540546147
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Budapest'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Semmelweis Egyetem'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eduroam.semmelweis.hu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24261383649857483497594986559882944428275562028940611201937849413676936195898708356017463490823301659067682013660654316574014422178740124544690915284387549210200399588705061980234066280725070217888073061936262547123415765167187882943887502013355997440195588951464958187521258188105735271294213942537529389274367551139962505199381998390178623973037762800840407342799615652670592921754357199179113785834491249637631437658658530052816374101208667445179001379308153882441533010272465909652621235810310647183306755512798515342266466985524217614907244243101513682081240666983796246397920866095121476081383206440995144520843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a87e70c2fd70b9c3e982f2d9e76cc515ea92f01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduroam.semmelweis.hu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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