pf.truni.sk

- Trnavská univerzita v Trnave -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number fa:38:03:f9:0c:71:f8:74:a4:de:2a:de:9a:d7:e1:6d was issued on by GEANT Vereniging.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Trnavská univerzita v Trnave

Organization: Trnavská univerzita v Trnave
State / Province: Trnavský kraj
Country: SK

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): fa:38:03:f9:0c:71:f8:74:a4:de:2a:de:9a:d7:e1:6d
Serial Number (int): 332597848149199797614043443645099008365
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3b:ac:f0:8d:04:4c:a9:2e:04:fc:72:b7:02:b7:2a:d7:cc:be:3e:8f
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 6e:38:59:06:d1:06:1e:68:fb:69:7b:e8:29:7d:f9:08:72:7f:c2:d0
Fingerprint (sha256): f3:6b:4a:53:6c:fc:e5:ae:ec:d8:f9:1e:4b:b0:06:dd:f1:70:96:df:30:f4:51:41:91:ad:4d:2c:b7:9e:8a:9a

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate pf.truni.sk

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pf.truni.sk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pf.truni.sk
iuridica.truni.sk
prf.truni.sk

Other certificates including the domain name truni.sk

(limited to 100 certificates)
webmail.truni.sk
webmail.tvu.sk
www.truni.sk
idmportal.truni.sk
wap.truni.sk
webmail.truni.sk
meteo.truni.sk
pdf.truni.sk
strava.truni.sk
indukcia.truni.sk
www.truni.sk
ezp.truni.sk
sts.truni.sk
ff.truni.sk
www.truni.sk
sibidp.truni.sk
meteo.truni.sk
vpn.truni.sk
pdf.truni.sk
shib-idp.truni.sk
rlgc.truni.sk
strava.truni.sk
moodle.truni.sk
webmail.tvu.sk
www.truni.sk
strava.truni.sk
strava.truni.sk
connect.truni.sk
rdgateway.truni.sk
radius2.truni.sk
esmc.truni.sk
strava.truni.sk
strava.truni.sk
ezp.truni.sk
strava.truni.sk
www.truni.sk
eshop.truni.sk
sts.truni.sk
mais.truni.sk
3point.truni.sk
idmportal.truni.sk
radius1.truni.sk
fzsp.truni.sk
mais.truni.sk
www.truni.sk
moodletest.truni.sk
mais.truni.sk
rlgc.truni.sk
student.truni.sk
kybez.truni.sk
3point.truni.sk
webmail.truni.sk
ezp.truni.sk
sip.truni.sk
fmc.truni.sk
mais.truni.sk
remlabgrab.truni.sk
idmportal.truni.sk
rdweb.truni.sk
webmail.tvu.sk
idmportal.truni.sk
rdweb.truni.sk
indukcia.truni.sk
skype.truni.sk
pf.truni.sk
kybez.truni.sk
moodle.truni.sk
webmail.truni.sk

Certificate

The complete raw certificate details for pf.truni.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuEsVfB5UxNJUlJXGqpY
WStYgrqp8rvRc7wvw8xew4IN40hAKKWk/2JyMaT6PEk3N9e86ayNQYFVx+AMIblL
uVvxnTioRWj4fHck1qHq954+pDdBGp1gGIZ8irFQ/KLu6rnWKAsHFKkjAV4hk2ol
XLBwtrloq3yE9TGMFCIpWlQdUbPuSF0sYNOGKvb6PBe4nedMBuOa62NrTHADvJiV
o+rxpe4GEbkg7fbYW2+reQBybrwWjgdrioHzob0caxNaJx3XSgpPv93TXXlWIu7o
jOzIbuuSVE2bH7hMumsnygbKDcNtKCvBKk9D0BKjnmrNqf4XyUf0SaUsQeq/Fjzq
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332597848149199797614043443645099008365
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trnavský kraj'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trnavská univerzita v Trnave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pf.truni.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23591361760273467645043159248054967132181196422280072283908211848844155556151427746095919105028417017884673924852955935139256145385128212308293451114792356403461022398667624976290161482834237222008871168794467763203855520165570764960642281430463716232828400337486000070045709276178553131664965818140579317332580236118230991348768911393324542248506202911803817504548400644399934724740973583129133084620934595872614727547846398370538334286185412595713120121046103161954168873384884111888769900872210615604840700433969144974044731444400440830355882159205444681091928803603926565569624400807798715160673049465573370292849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3bacf08d044ca92e04fc72b702b72ad7ccbe3e8f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pf.truni.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iuridica.truni.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prf.truni.sk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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