*.pxl.be

- Hogeschool PXL -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number fd:47:ed:c6:08:bc:3b:7f:5e:76:0f:93:61:63:8c:0b was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Hogeschool PXL

Organization: Hogeschool PXL
State / Province: Limburg
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): fd:47:ed:c6:08:bc:3b:7f:5e:76:0f:93:61:63:8c:0b
Serial Number (int): 336668158631495370978342113027868036107
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 5a:d0:d2:c1:72:16:35:de:b0:5a:8f:2b:81:15:33:4e:a7:9a:bf:bb
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): fc:5d:67:3b:1b:dc:d2:54:9a:43:c9:a3:15:a7:6e:78:66:c0:c9:39
Fingerprint (sha256): b7:96:c7:61:d5:0a:4d:5c:23:96:8f:67:7c:8c:48:99:1a:5a:fa:08:c3:cb:62:b5:b8:15:c4:2a:fb:dc:25:65

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.pxl.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pxl.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pxl.be
pxl.be

Other certificates including the domain name pxl.be

(limited to 100 certificates)
vpn.pxl.be
clearpass.pxl.be
fs3.pxl.be
ctx.pxl.be
video.pxl.be
sepman.pxl.be
onb.pxl.be
mail.pxl.be
apple10.pxl.be
*.pxl.be
ironport.pxl.be
vm5.tin.pxl.be
citrix.pxl.be
ins.pxl.be
onb.pxl.be
pxldc1.pxl.be
fs1.pxl.be
onguard.pxl.be
blackboard.pxl.be
mail.pxl.be
citrix.pxl.be
video.pxl.be
csg.pxl.be
*.pxl.be
blackboard.pxl.be
*.pxl.be
*.pxl.be
apple09.pxl.be
onb.pxl.be
mijnlessenrooster.pxl.be
blackboard.pxl.be
vpn.pxl.be
*.pxl.be
www.pxl.be
onb.pxl.be
ctx.pxl.be
airwave.pxl.be
fs1.pxl.be
ctx.pxl.be
fs3.pxl.be
wcf.pxl.be
onb.pxl.be
*.pxl.be
onb.pxl.be
onb.pxl.be
fs3.pxl.be
mail.pxl.be
captiveportal-login.pxl.be
apple02.pxl.be
airwave.pxl.be
*.pxl.be
mail.pxl.be
voorinschrijvingen.pxl.be
apple05.pxl.be
blackboard.pxl.be
*.pxl.be
*.pxl.be
citrix.pxl.be
video.pxl.be
eva.pxl.be
vm9.tin.pxl.be
staging.pxl.be
xenapp.pxl.be
*.blog.pxl.be
ctx.pxl.be
apple.pxl.be
voorinschrijvingen.pxl.be
blackboard.pxl.be
ins.pxl.be
onb.pxl.be
apple.pxl.be
ironport.pxl.be
pxldc2.pxl.be
csg.pxl.be
prlcontainers.pxl.be
mijnlessenroostertest.pxl.be
onb.pxl.be
vpn.pxl.be

Certificate

The complete raw certificate details for *.pxl.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+Q3lhROR5NNn7pdOyRd
xMLCjHUsYPEtBd5Bt5OCo3mxZJmhMSo/VUj3nvbYjJITM3zqxvnMMeBeTBezYPUD
F+ptK4i2UTK/V03KQEEL2j6UVvtBgmfZjiGe9gjZLOK/btT3OevEaDzl4jfKgNWT
PaSNKeSuzZIkN05vlvUjfW8pyht+IIBYZyJroGw7WAFZaP+stpkJQhmOwF9mKEMG
PODFiVYeQMEHO0kUdHaxJy9PvBpmW7qmB7FEAbkLbweOh+E9sM+LknOH0NNiVWPP
u/ifHW8/xmQjERYfeazjo7U9TvgZAtPjXUSZtacinWSdFvmPCPRVjOzyS1et9x3b
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336668158631495370978342113027868036107
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Limburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hogeschool PXL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pxl.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28263680070448387499781289115407005176132258043558217343601474388623162318622608121595618044132941740567685689297277200426847127162398029197335174323705321072825412244141251587902431904000463039377734287520216956127562333491395845497086839785940378071299296708783582729663139793328313219492553584153153625115793873590559854252665189374161868336888638659693047937340277218480636350808221265193756260991099504191275912747841967607384871109808777983543783501295681632655677235558992470337427932990146958523909348702310405118279056938445904707114554737390737538777482580057152391633156431028448762017343249462939097094941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ad0d2c1721635deb05a8f2b8115334ea79abfbb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pxl.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxl.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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