cl.prd.hvaweb.formist.nl

- Stichting Hogeschool van Amsterdam -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 89:5e:2e:12:dc:c9:5d:9d:b8:a4:b5:cd:bd:de:dd:76 was issued on by GEANT Vereniging.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stichting Hogeschool van Amsterdam

Organization: Stichting Hogeschool van Amsterdam
State / Province: Noord-Holland
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 89:5e:2e:12:dc:c9:5d:9d:b8:a4:b5:cd:bd:de:dd:76
Serial Number (int): 182593245812514579958466153298094120310
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 11:c0:61:eb:4e:32:27:a9:7d:10:f5:ad:d1:f2:e0:c5:41:07:12:f4
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 99:c8:83:7e:d5:cf:0e:2f:1f:27:e2:0f:9e:32:33:1b:75:1f:fa:f5
Fingerprint (sha256): c4:dd:38:4d:4c:5d:b6:7b:ec:b2:4a:6a:5c:24:79:be:4b:e1:18:17:1d:6f:0e:3c:31:57:68:65:42:f2:be:d7

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate cl.prd.hvaweb.formist.nl

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cl.prd.hvaweb.formist.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cl.prd.hvaweb.formist.nl
cms-prd.cms.hva.nl
cms.prd.hvaweb.formist.nl
graphql-prd.cms.hva.nl
graphql.prd.hvaweb.formist.nl
storybook-prd.cms.hva.nl
storybook.prd.hvaweb.formist.nl
www-prd.cms.hva.nl
www.amsterdamuas.com
www.hva.nl
www.prd.hvaweb.formist.nl

Other certificates including the domain name formist.nl

(limited to 100 certificates)
cl.acc.hvaweb.formist.nl
discovery.canvas-acc.awsuva.formist.nl
cl.tst.hvaweb.formist.nl
cl.trn.hvaweb.formist.nl
cl.acc.hvaweb.formist.nl
cl.trn.hvaweb.formist.nl
cl.tst.hvaweb.formist.nl
discovery.canvas-prd.awsuva.formist.nl
cl.tst.hvaweb.formist.nl
cl.acc.hvaweb.formist.nl
discovery.canvas-acc.awsuva.formist.nl
cl.prd.hvaweb.formist.nl
cl.prd.hvaweb.formist.nl
cl.acc.hvaweb.formist.nl

Certificate

The complete raw certificate details for cl.prd.hvaweb.formist.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYeAnPK63B8DZ41AVqmf
J/9DXjkgJBrldC8DZZPUAOyGqik5VvlUxegThXJeIfsI0mmTWgunwphlw+In7hV4
JEY7xeLIXcoVelq+InHRZASeQ+n4OEJM52hymuoklRmRIgnbv9EOSQbZ0MJfb9lm
LzVCMP+jtznHtj5uf66CNPSOCLm4drlMUKT5TZxma6yw/x5GLRaac0d5IpgIJ9xC
p/fIwL+Rb7fsv9308PuIJo1y/dhiXKq1dTZs7nm5Q+QZwAprw2cHvjI4uVj87KGK
/40ej/HafmiPMfDJ0VEaw1iRMIMuXCL7+vSPZAHjdt/DMhhaUKYu9h2gjwHGTM8J
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 182593245812514579958466153298094120310
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Hogeschool van Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cl.prd.hvaweb.formist.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24430811579712233773446594904654961179967251524404404110207960309964605798368891627798613236283854092148957411740431598802347770610397624620958881541742738177014271037081228074591220428301420061064825639560100670081956220802510804408150684722317653649886335423811703248768053673856577053497102537091860221052335160214484752719948330123625612039605426298404158615964660106976961060142501329003931432910837871690871653390722963502088520332518793756510236524605391147653518813569692623885604923375714971119081932273108090393985592995899705295749507365939398315507649566414589869901672999004108594295565739405085070264631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11c061eb4e3227a97d10f5add1f2e0c5410712f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (272 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cl.prd.hvaweb.formist.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-prd.cms.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.prd.hvaweb.formist.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphql-prd.cms.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphql.prd.hvaweb.formist.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storybook-prd.cms.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storybook.prd.hvaweb.formist.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-prd.cms.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amsterdamuas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prd.hvaweb.formist.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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