deic.dk

- DTU/DeiC -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 97:c5:26:3b:c9:2c:22:a3:21:25:c7:35:c1:a7:49:b5 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DTU/DeiC

Organization: DTU/DeiC
State / Province: Hovedstaden
Country: DK

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 97:c5:26:3b:c9:2c:22:a3:21:25:c7:35:c1:a7:49:b5
Serial Number (int): 201737085312940028236189040184878647733
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9d:f2:31:29:48:61:2e:ad:46:85:4a:05:da:fa:77:be:65:7f:f9:54
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 5b:c8:1a:6d:e9:48:e1:1a:d5:44:d7:85:75:ba:3e:3e:21:8a:21:6e
Fingerprint (sha256): ac:ca:fb:fb:3f:bb:68:ec:18:2e:da:2c:d7:e7:af:dd:2f:97:0e:d0:ea:2c:a1:86:75:af:bc:22:59:f8:26:c4

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate deic.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for deic.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

deic.dk
www.deic.dk

Other certificates including the domain name deic.dk

(limited to 100 certificates)
gitlab.deic.dk
wayf.deic.dk
meet.deic.dk
filesender2.deic.dk
sciencedata.dk
unifi.net.deic.dk
gitlab.deic.dk
*.c.deic.dk
de161207.deic.dk
webpoint01.deic.eu
www.deic.dk
synore.sky.deic.dk
www.ddps.deic.dk
webpoint01.deic.eu
synnefo.sky.deic.dk
www.ddps.deic.dk
filesender.deic.dk
eduvpn.deic.dk
gitlab.deic.dk
pithos.sky.deic.dk
gitlab.deic.dk
*.c.deic.dk
*.nyhedsbreve.deic.dk
dmponline.deic.dk
filesender.deic.dk
www.deic.dk
eduvpn.deic.dk
pf.deic.dk
info.net.deic.dk
www.cs3.deic.dk
de161207.deic.dk
gitlab.deic.dk
gitlab.deic.dk
wayf.c.deic.dk
wayf-udv.c.deic.dk
eduvpn.deic.dk
gateway.dgw.deic.dk
www.ddps.deic.dk
digiexam.deic.dk
blog.deic.dk
node68.sky.deic.dk
webstat.deic.dk
mitfsknet.deic.dk
eduvpn.deic.dk
test.data.deic.dk
gateway.dgw.deic.dk
*.dgw.deic.dk
eduvpn.deic.dk
admin.eduroam.deic.dk
eduvpn.deic.dk
gateway.dgw.deic.dk
pithore.sky.deic.dk
pithos.sky.deic.dk
c.deic.dk
*.c.deic.dk
www.abacus.deic.dk
dtuguest.deic.dk
c.deic.dk
sol.sky.deic.dk
gitlab.deic.dk
info.net.deic.dk
synore.sky.deic.dk
wayf.c.deic.dk
*.data.deic.dk
okeanos.deic.dk
pithos.deic.dk
silo1.data.deic.dk
info.net.deic.dk
data.deic.dk
webhotel.deic.dk
webpoint01.deic.eu
gitlab.deic.dk
www.blog.deic.dk
enav.net.deic.dk
unifi.net.deic.dk
digiexam.deic.dk
gitlab.deic.dk
gitlab.deic.dk
eduvpn.deic.dk
gitlab.deic.dk
dtuguest.deic.dk
c.deic.dk
dmponline.deic.dk
deic.dk
*.dgw.deic.dk
filesender2.deic.dk
www.ddps.deic.dk
www.ddps.deic.dk
dmpsandbox.deic.dk
deic.dk
ipass.deic.dk
pithore.sky.deic.dk
synnefo.sky.deic.dk
*.dgw.deic.dk
webstat.deic.dk
radius1.eduroam.deic.dk
filesender.deic.dk
admin.eduroam.deic.dk
vidensportal.deic.dk
eduvpn.deic.dk

Certificate

The complete raw certificate details for deic.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 201737085312940028236189040184878647733
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hovedstaden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DTU/DeiC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'deic.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778937865907684720376476990257539762135293584222906266360757153212037533076181189896915656321966591856491939127839428224188803599789361709847306379287514501559327648312600321043219638547426952292422510046604443719215398292360214125951040162251058026948270107691676168086598919179025227784530234875295811487427459425366150153419800641742688936999891584732098791648623830962285985621020090188468935122413728464549286368034584989595565941910963652856885873486836944757998075009849960444724118336139820472801074762437592030361342591391491342254552495295263286932572963485259965104338526148830116630949075103260644860564163776854196430991046505195029197105672706744728088752441551451885089080977325850964654176289823843167803890635002018925820268175729822675837814149063251099769227751419773594973715459865649215029107162072296817639904266007542695971300785384184942403593048645590037613105788353227820382583097348208641740435392356425122730337794615150154362447833816630032785154300964645468186984592083901226041248977857740853945884064401001609569500797873038289782539683812123031448223739677996644718747429783155281154107964181276925961062595209521416045871930754040779457697643860922098142374685320349492300787519989776650741567901963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9df2312948612ead46854a05dafa77be657ff954
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deic.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deic.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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