sts.eib.org

- European Investment Bank -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 3a:f2:d8:d0:04:48:69:7e:95:03:77:83:3a:bf:1e:c2 was issued on by Entrust, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

European Investment Bank

Organization: European Investment Bank
Locality: Luxembourg
Country: LU

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 3a:f2:d8:d0:04:48:69:7e:95:03:77:83:3a:bf:1e:c2
Serial Number (int): 78356157076548221524124627189071027906
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: a6:91:4e:1b:52:23:f9:dc:98:7e:b7:74:12:de:17:d5:21:5c:16:24
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 72:c7:a6:b1:76:2d:72:13:f0:bd:75:2f:be:67:31:a0:a0:20:c9:dd
Fingerprint (sha256): ab:9c:aa:3b:5a:e5:d7:82:0c:2f:92:ec:4e:6a:f0:6d:5f:4e:3f:4f:d4:1d:b0:a0:73:d9:57:f0:38:dc:69:8d

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate sts.eib.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sts.eib.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sts.eib.org
enterpriseregistration.eib.org
enterpriseregistration.eif.org
certauth.sts.eib.org

Other certificates including the domain name eib.org

(limited to 100 certificates)
*.api.greengateway.eib.org
sip.eib.org
sip.eib.org
multisite.adelphi.de
pf4ee-webcheck.eib.org
pf4ee.eib.org
multisite.adelphi.de
my.eib.org
sip2.eib.org
www.eib.org
eib.org
*.eib.org
institute.eib.org
*.eib.org
my.eib.org
multisite.adelphi.de
www.eib.org
sip2.eib.org
www.eif.org
*.eib.org
sip.eib.org
multisite.adelphi.de
remote-uat.eib.org
*.eib.org
sts.eib.org
*.lux.eib.org
multisite.adelphi.de
advisory.eib.org
multisite.adelphi.de
*.eib.org
ews.test.eib.org
sts.eib.org
*.eib.org
*.eib.org
mdmcore-dev.eib.org
*.eib.org
*.eib.org
exwye-01.eib.org
*.eib.org
multisite.adelphi.de
pf4ee-webcheck.eib.org
trad.eib.org
greengateway.eib.org
*.eib.org
lsweb-ext2.eib.org
lsweb-ext.eib.org
greenchecker.eib.org
*.greenchecker.eib.org
erecruitment.eib.org
privateeibforum.eib.org
sip.eib.org
apim-configuration-management-dev.eib.org
institute.eib.org
cwtest.eib.org
inmx.dev.eib.org
*.EIB.ORG
privateeibforum.eib.org
multisite.adelphi.de
multisite.adelphi.de
*.eib.org
institute.eib.org
*.eib.org
NetAccess.eib.org
ews.dev.eib.org
events.advisory.eib.org
*.eib.org
exwye-01.eib.org
*.eib.org
mail.dev.eib.org
advisory.eib.org
multisite.adelphi.de
edge.eib.org
multisite.adelphi.de
sip2.eib.org
pf4ee.eib.org
*.beilux.eib.org
vcs.eib.org
pf4ee.eib.org
www.eif.org
mdmcore-uat.eib.org
helpdesk.greengateway.eib.org
sbc-01.eib.org
sip.eib.org
trad.eib.org
lsweb-ext2.eib.org
sts.eib.org
institute.eib.org
*.eib.org
*.eib.org
www.eib.org
pf4ee.eib.org
mdmsas-dev.eib.org
ews.dev.eib.org
*.eib.org
mdms-dev2.dev.aws.eib.org
pf4ee-webcheck.eib.org
remote.eib.org
sts.eib.org
www.eib.org
advisory.eib.org

Certificate

The complete raw certificate details for sts.eib.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3DAvqmGOvLenq8bErAb
EaL60fSS/ukWg6COf0JfDxwEVH6G5HjuGirZwAS/FO/W8jfGdkMi0QaLOof/8zrD
FhSuUw4CmOaXcrNv+6oydjh/Thw1ZwYN0m4iT3JGQihTmp/Ei5xXlqLiAy7jI6k9
sfpPY/HMD8kSMmGomhOV6EBa5TSbIEcpR/9+sFhkJjMfLJz1dCVYS89LJrcGLB4B
RG8SemSoKFTfMioRWjbQqeWlY13iZ67HfWgG75BgqZR47Cfjerd22RjH6LYmwH3W
Sb6VUkn4BJREJdOOfPE6tMXbRvZ6YONgM6Jpk0llScV8nmDaX2VS5J08JlwPMgb/
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 78356157076548221524124627189071027906
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 08:37:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-27 08:37:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'European Investment Bank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sts.eib.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22147303900883645487635350108165766140483755898497024210809671191505201906766843707402848595964962398063132263408784398800982736418891714681195383948302706031143451758457098998811109617463514793050484208246114946445407202920230335058664146629934303505124729889838344890319635648765768711414117058006313810846357572951506680439504015126124227860164999941769276214246157612835770595463277394720868863846462844606095316916024882373892410485300716130612654615152401160658030287779338768325457854704369451361568287860182843202676149607621289336757957594778004210566583329132021997217632580355493639370256905999220417691497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6914e1b5223f9dc987eb77412de17d5215c1624
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.eib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.eib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.eif.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certauth.sts.eib.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680075004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018df92962e000000403004630440220138bedafac35f0d21e9b708c04c132ace7a3fabbbec7c23e07791b732ce6141102203802dcacf7fbc13009dd902f41eb03df2e3c0c0fafd731ad730f375eb6737818007700e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018df92962fc0000040300483046022100ef8c2f00e746e32d39eb784423019883154cef07c002bc1da80e6328d412d7f2022100a67ff298dde3b945e267b5a310e17c2c5ad46925115b784730046f7dac80c279007600a2e30ae445efbdad9b7e38ed47677753d7825b8494d72b5e1b2cc4b950a447e70000018df92963070000040300473045022100f6c9f500141dd2aba3018336f2fe0a62c5e1dd02c0045fd0b3731c0e39e066cc022004145b8d1c2751fafd2ca272014ade99d34f38093be187420bed87c18252546d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0081a4d9a74d8936b04be99116c4a03c9621842744db55e021c1d58c4604498f8ce689ad2e769cf838a4dcf40e1b96be985188844804c2e0577bfc60dfb3ef1d201bd06e8709ccb3ebc5dc546c8a3c68d0693e43b2ad451be565548f7c00747fcfb73b96a3742fcaf415bb5fbd8bf6a2d29e208b548d967686713c581feb3fc9fce5664001d348a00b0302118ee7dc7f93988c75468311b2cd7a810dc88f9a75d61fc2dcb7632427a00ac9f321710d693352c5904ddf67a6a8aa3f5a8953edc77816f02d069445a3132415f698be1a6ea790c3d104aad97fd8953f692011072989c3e976b5c0180c1b11742d41f1fa3b0bac61c085d0b2f910d842daae5b34e375