edition-humboldt.de

- Berlin-Brandenburgische Akademie der Wissenschaften -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 79:01:dd:6c:a8:55:29:56:ba:ed:ab:83:46:80:19:f7 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Berlin-Brandenburgische Akademie der Wissenschaften

Organization: Berlin-Brandenburgische Akademie der Wissenschaften
State / Province: Berlin
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 79:01:dd:6c:a8:55:29:56:ba:ed:ab:83:46:80:19:f7
Serial Number (int): 160846270808093749570269950896467089911
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ee:4d:73:e4:b4:d2:a8:da:f4:fa:39:2c:2b:06:0c:21:88:4c:36:a1
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 3e:6b:dc:a9:e4:cc:f9:0e:43:fc:bd:52:b7:33:50:99:eb:eb:74:e9
Fingerprint (sha256): a1:67:8f:27:a3:86:d7:e7:5a:fd:35:97:29:0e:f5:86:80:df:32:2d:df:26:6d:a3:ad:91:50:4c:a0:af:9e:d0

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate edition-humboldt.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edition-humboldt.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edition-humboldt.de
www.edition-humboldt.de

Other certificates including the domain name edition-humboldt.de

(limited to 100 certificates)
edition-humboldt.de
edition-humboldt.de
edition-humboldt.de
api.edition-humboldt.de
edition-humboldt.de

Certificate

The complete raw certificate details for edition-humboldt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 160846270808093749570269950896467089911
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin-Brandenburgische Akademie der Wissenschaften'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edition-humboldt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 908721198438809131796549846173093459001957136753518085859430761921774448570401565322408908235629688382323231754915029920047450123433321632764783816041416402862066111995882661530523692832945001831598195541761018124669779237420249743859215471927250059174717602004940792290342116580139591087582535882130468365093578017144245629871135185675325844455020678349398426853042898556091427488703391960990133940218507616050103774490102068030676741139633279084599402773761986198992839014650479958014298851020790956593017408390020963617096625058771559836717389575886085254401531399124329305784031920696625705866020926449102343844343765455804481080152021346846542047153931556845324780486508966471098446210508607731201027517583158031845998432578275116118486612643379785529667754002160668654462747201395251795863852050844237665707507877802235939236260217676279377612254608987525649467477767014683200556466899799524163853346793514088191093711927047890698342852920808830091125470522338702766757215790692357123236357329583054150866305969283369623850195278232836625243526213545943731921137689946241054947374063084288854606870185735713221876121106096940711342527011038639925032748876338960058982819511394138020708705170607515841673832983183060741101503079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee4d73e4b4d2a8daf4fa392c2b060c21884c36a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edition-humboldt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edition-humboldt.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		009893865ef29e1ae30a0d8b9e5ad9a038802eabdc90f73a0129e3ca0fb5c640a6bf65baedd4706aa30e117352a91d07968ecac15e2122e6f37fd69d4c9d75a93cc5b94d45c578b2677674f9aa7ad71336467089c05e3f5910dd70317e7f9e8788d5b17f14a02560a6ec5523596319f5c869d979eeebc3027911aedc5400b0b0de4526e68ca336a194090fa68f70ce53ec873b1ed0bf3326f5553c8dc72f8da5b73189d07b8c4f6dc2428170321f4e214b7fbd63748c2434fe3b21c8ab0fa181bbb1d02d135e14b92c4b9e74ec324f44c06d4a5606fdd5625ccf6a5698df5293e8edc2a1803f25a1459e18b51e2ca3ef70a6cfc703967d6e3c735d5a11775d413d713e0b952f0111fe703487eb8522d60d22d8f1f55dfc340a2a28626eaf6426a30756de715fe4e710bd5231ce6590aece0b4a86e29215f020dee4000c8c2ca3bfbcc6b1073c61b2ef6880d5041a670cfe478108ab43e55fdf7d4f7d5ac454386492a59dfc6a98269a81c5029ef29ebc951e94b0662d66d9c3cf01a045f2ad7bb4ef3ba8a921d022cbe87e55ebb66d54cc8d07a6e39a6ac26fa00f91b081bb63c15e6d602087aff2160665a9b61592a1a10fab58667159a82c33087b2b020b253e55ae2c0305754b99825b187148f38842bf74beb656aa8c13df9097d6cf3dd5e451c0a8d6344e26c3f0fa3ec52fd3309ed59cb6cca956a2b7569f0be8ecaa1f03