cl.acc.hvaweb.formist.nl

- Stichting Hogeschool van Amsterdam -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 2d:4e:24:32:77:a0:83:5f:04:b2:ef:95:e5:9a:a2:59 was issued on by GEANT Vereniging.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stichting Hogeschool van Amsterdam

Organization: Stichting Hogeschool van Amsterdam
State / Province: Noord-Holland
Country: NL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:4e:24:32:77:a0:83:5f:04:b2:ef:95:e5:9a:a2:59
Serial Number (int): 60220993130463552691715781325758308953
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 3e:7c:ca:e6:27:d4:f5:51:52:4a:43:62:55:18:f0:5c:82:80:10:4d
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): eb:b5:b0:72:71:aa:fd:9a:fc:13:99:fd:81:0a:61:64:1d:19:95:16
Fingerprint (sha256): da:6a:51:3f:77:37:e8:64:d6:cb:9b:82:b3:0a:9b:e2:94:dd:d5:9d:0a:9e:21:f0:d5:3a:ac:9c:7f:91:88:57

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate cl.acc.hvaweb.formist.nl

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cl.acc.hvaweb.formist.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cl.acc.hvaweb.formist.nl
cms-acc.cms.hva.nl
cms.acc.hvaweb.formist.nl
graphql-acc.cms.hva.nl
graphql.acc.hvaweb.formist.nl
storybook-acc.cms.hva.nl
storybook.acc.hvaweb.formist.nl
www-acc.cms.hva.nl
www.acc.hvaweb.formist.nl

Other certificates including the domain name formist.nl

(limited to 100 certificates)
cl.acc.hvaweb.formist.nl
discovery.canvas-acc.awsuva.formist.nl
cl.tst.hvaweb.formist.nl
cl.trn.hvaweb.formist.nl
cl.acc.hvaweb.formist.nl
cl.trn.hvaweb.formist.nl
cl.tst.hvaweb.formist.nl
discovery.canvas-prd.awsuva.formist.nl
cl.tst.hvaweb.formist.nl
cl.acc.hvaweb.formist.nl
discovery.canvas-acc.awsuva.formist.nl
cl.prd.hvaweb.formist.nl
cl.prd.hvaweb.formist.nl
cl.acc.hvaweb.formist.nl

Certificate

The complete raw certificate details for cl.acc.hvaweb.formist.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TzPZ6yo0CJjJRdg8ZFe
bMKsE0WWEJPSWKfnF7gUMHeKGZYDAxQzXRdy/jbTur8F9kPPbnsbW6NzTt0PAiCc
KsJHjRYwVfdAOlieG8v5xzDLICmcstQVbE16129QjO4vqbXykERGG3aZq+3eib+5
x+uTahD5XI/EdyMzdKtA7uKYUU/zDsSCgLE1f2jV7KJM2DaTaRuBMwz879BuX0gS
GdVhtQ3y1m2rAc+Otv6IxTZzPQpkDBqjAmTAzlZmVBgT7h2Yw5Om0Oe0oyxjw6dx
zgoNybMjktWpnkVX63CABe6XpW1i0MggbNHp0r1uGHgFThssvu78QbMdRcx073M8
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 60220993130463552691715781325758308953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Hogeschool van Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cl.acc.hvaweb.formist.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29948464892208331434158197495883239081557004157333372405392290789043771802666198063838892945685486677185336120969816317385521085729325570665904969967422563049100897749365569613690193937677156451431068588488378429156805994663853208981689283013479439068689800510671411828080209335101580385200915964823633678413968314253277642539360716570016803795962151559021499512997466796846932345714151498114943313727114744715971073568714201042596588868634272820645275157983705977937029593830487823289757644745103134149399382475143583997746075477903129895864059473000419802455045584834992568632184085584074330806750415027178099129411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e7ccae627d4f551524a43625518f05c8280104d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (237 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cl.acc.hvaweb.formist.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-acc.cms.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.acc.hvaweb.formist.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphql-acc.cms.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphql.acc.hvaweb.formist.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storybook-acc.cms.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storybook.acc.hvaweb.formist.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-acc.cms.hva.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acc.hvaweb.formist.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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