OV SSL/TLS Certificate for cellrank.org Issued to Helmholtz Zentrum München Dt Forschungsz f Gesundh u Umwelt GmbH

Certificate has expired

Issued by GEANT Vereniging (GEANT OV RSA CA 4)

About the cellrank.org OV SSL/TLS Certificate

This certificate with serial number 02:72:e4:18:fa:ca:bc:d7:f1:ef:22:67:8a:e0:01:c1 for cellrank.org was issued on by GEANT Vereniging.

With 4 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate has already expired and will cause a warning or error message. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for cellrank.org provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This X.509 certificate expired on

Certificate Details

Serial Number (hex): 02:72:e4:18:fa:ca:bc:d7:f1:ef:22:67:8a:e0:01:c1
Serial Number (int): 3255004201924682277941221046460875201
Serial Number Length: 122 bits, 16 octets

Subject Key Identifier: 91:d3:a2:67:f4:d8:54:e7:a0:39:13:cd:3a:ff:42:ae:01:71:c0:10
Authority Key Identifier: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (SHA-1): cf:37:d9:3c:81:29:1c:e5:8d:41:47:38:99:91:88:30:09:b6:f6:90
Fingerprint (SHA-256): 68:91:34:bc:f7:38:e6:9b:f1:62:87:a1:ac:06:97:5b:ac:6a:bc:a9:a8:5a:fa:d6:6a:a3:5d:1f:7b:bb:03:f3

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation Information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate cellrank.org
4
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for cellrank.org

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for cellrank.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3255004201924682277941221046460875201
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helmholtz Zentrum München Dt Forschungsz f Gesundh u Umwelt GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cellrank.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 903027980896430794003528290728079373335273516248895099833900525606584741067504750672477255114565164620641939233590286424945390520013722384142340692922214011673130741756855884838736191601462910359024690344227624281588116106791645928603450735227869621844171836994132160122629285979658073674442508642144891993508906663406995813077124590709454794165499878123278200410770789754529922772972714683340451494398184412005699110006361762707439911168182751197444064031102880148426318944254361127295412331524791038077778498292608403370136527984518225845665634158928983167139651452882991044795580545134962650194554617752673727341394294715084040634081132958169174856460571506927978677904584681613339939057237009172046395332701797754267444187417692063027543573588319329360244708932469071622793087213425905027755131621187915270656738926114121723170774595205396534630335043316628148336544340901658366436955743223210792840034485216880146341717400355713967625969786274657328157144521257717578909945780603629426406432664955307731643415180357603005966461087626143792307694269929550648840369941372733149225989649806009680098193494297241162580048740060454992515361402575250005321725468780280543744637302837417898500491730030064879533004010269452000165399623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91d3a267f4d854e7a03913cd3aff42ae0171c010
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellrank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moscot-tools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cellrank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moscot-tools.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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