2besafe.grad.hr

- Sveučilište u Zagrebu Građevinski fakultet -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 2e:67:49:d3:6b:14:f1:e0:9a:81:d5:07:d6:f0:77:5d was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Sveučilište u Zagrebu Građevinski fakultet

Organization: Sveučilište u Zagrebu Građevinski fakultet
State / Province: Grad Zagreb
Country: HR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 2e:67:49:d3:6b:14:f1:e0:9a:81:d5:07:d6:f0:77:5d
Serial Number (int): 61680791748718791281832619297888827229
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: b1:bc:6e:ae:6c:2a:02:c7:17:42:0e:14:b7:df:51:ed:c5:63:4b:80
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 14:13:11:de:13:dc:e7:eb:8b:68:4a:f8:bd:cb:37:c8:f0:5f:34:f7
Fingerprint (sha256): df:eb:1f:0c:d2:eb:af:36:d8:87:ef:0f:c4:17:73:9d:84:82:31:ff:cd:e8:3e:5f:05:c5:aa:6f:93:6e:e6:a1

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate 2besafe.grad.hr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 2besafe.grad.hr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2besafe.grad.hr
2besafe.grad.unizg.hr

Other certificates including the domain name grad.hr

(limited to 100 certificates)
hr.archive.ubuntu.com
www.grad.hr
ubuntu.grad.hr
praksa.grad.hr
hr.archive.ubuntu.com
hr.archive.ubuntu.com
firewall.grad.hr
master.grad.hr
student.grad.hr
master.grad.hr
student.grad.hr
student.grad.hr
student.grad.hr
hr.archive.ubuntu.com
hr.archive.ubuntu.com
hr.archive.ubuntu.com
master.grad.hr
sage.grad.hr
www.grad.hr
hr.archive.ubuntu.com
master.grad.hr
sage.grad.hr
master.grad.hr
master.grad.hr
firewall.grad.hr
ubuntu.grad.hr
2besafe.grad.hr
hr.archive.ubuntu.com
student.grad.hr
hr.archive.ubuntu.com
ubuntu.grad.hr

Certificate

The complete raw certificate details for 2besafe.grad.hr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotLd8DpjlXfWO5K55s84
Hz7vUY29VEZcQ3Hm7iy9AuB791RO0YhVnHubKltYacwW4zfEBF+Ar9fPNJkUu3yZ
y8YrqNnwNcPl7a6L9dQpBqwt0cXpJ5OZPaAe/yl0GkkDnViNQXCy9YvFFHa5qd1b
84j6MEy+yQUwjgTBWOlmGX8OR/KUmZzkYxwYVL03XeBtsu+u5/4esf0chqXQFsgv
6zIoeoPwWtidWyqh8qTBSA3zz4hvoS2YaAH66AW2o5q5LjGoDyD8n/Zxq1/HLTCo
RRRa0JErseufgwdDVnz7vtbU4nAPtlBbuC1vh1M4RuTTFlxMyzDQ5pp4UIue7aRk
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 61680791748718791281832619297888827229
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grad Zagreb'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sveučilište u Zagrebu Građevinski fakultet'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2besafe.grad.hr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20554587771464008352149606825204891132320647216832268483815906918738219681050367224750767905734456901115061801231151078734344687667345535348353351326297154091436218676734136784623097395465095157933055533192710350574546049617183874920106772189100043769755706277861428695469994964182124694266988985645476085588793987788371912321601788427678506706946550141786632022258853498398936703292472495022950529090364349252182745440801457248061717931287418628405271811663297031451774938327201357569293846833163418445782034984310299115736851004550501950067925918788804023343370989165416446576942216501747005092035639611025149682893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1bc6eae6c2a02c717420e14b7df51edc5634b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2besafe.grad.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2besafe.grad.unizg.hr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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