www.ap.be

- Artesis Plantijn Hogeschool Antwerpen -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number b1:a4:42:18:71:7c:92:c0:01:ba:19:7f:a9:4e:21:bb was issued on by GEANT Vereniging.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Artesis Plantijn Hogeschool Antwerpen

Organization: Artesis Plantijn Hogeschool Antwerpen
State / Province: Antwerpen
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): b1:a4:42:18:71:7c:92:c0:01:ba:19:7f:a9:4e:21:bb
Serial Number (int): 236126232514361968506494941711049826747
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 95:ac:ad:fd:eb:f1:89:67:8b:ea:5d:4c:04:01:ec:47:11:d5:3f:b3
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 72:61:1d:19:7c:ed:d0:54:5b:84:5a:2a:ce:7b:50:b4:8b:1c:31:f9
Fingerprint (sha256): ff:91:96:c3:9d:f0:bb:25:50:d5:24:79:f1:0a:5f:d1:f9:0f:7e:0b:8c:05:ff:a7:f5:de:cd:5b:d6:a2:47:43

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.ap.be

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ap.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ap.be
ap-arts.be
ap.be
mautic.ap.be
www.ap-arts.be

Other certificates including the domain name ap.be

(limited to 100 certificates)
inda.ap.be
ictpedia.ap.be
msimagine.ap.be
journalistiek.ap.be
journalistieknamen.ap.be
msimagine.ap.be
zorgneticuro.ap.be
inclusiedag.ap.be
showandtell.ap.be
gdm.ap.be
securelogin.ap.be
marketingshop.ap.be
eaict.ap.be
workshopweb.ap.be
senseofhome.ap.be
senseofhome.ap.be
eps.ap.be
eps.ap.be
feedback.ap.be
*.ap.be
e-campus.ap.be
inda.ap.be
eaict.ap.be
stats.ap.be
senseofhome.ap.be
filewave.ap.be
feedback.ap.be
msimagine.ap.be
sts.ap.be
ibamaflex.ap.be
showandtell.ap.be
beta.eaict.ap.be
marketingblog.ap.be
workathome.ap.be
antivirus.ap.be
msimagine.ap.be
journalistieknamen.ap.be
blokkenloop.ap.be
ai.ap.be
sr18.ap.be
feedback.ap.be
journalistiek.ap.be
wpnet.ap.be
jou3blog.ap.be
jou3blog.ap.be
blokkenloop.ap.be
journalistieknamen.ap.be
*.ap.be
stats.ap.be
aui.ap.be
stats.ap.be
dialoog.ap.be
*.ap.be
marketingblog.ap.be
senseofhome.ap.be
evasys.ap.be
surveys.ap.be
marketingblog.ap.be
surveys.ap.be
eps.ap.be
showandtell.ap.be
inda.ap.be
articulate.ap.be
blackboard.ap.be
journalistiek.ap.be
inclusiedag.ap.be
ai.ap.be
sr18.ap.be
eaict.ap.be
learning.ap.be
msimagine.ap.be
gdm.ap.be
ictpedia.ap.be
dialoog.ap.be
msimagine.ap.be
ictpedia.ap.be
webdeposit.ap.be
gitlab.ap.be
surveys.ap.be
rancher.ap.be
*.ap.be
*.dev.ap.be
ai.ap.be
blackboard.ap.be
inda.ap.be
stats.ap.be
cbbc.ap.be
ictpedia.ap.be
webmail.ap.be
cbbc.ap.be
ai.ap.be
*.staging.ap.be
showandtell.ap.be
ibamaflex.ap.be
jou3blog.ap.be
senseofhome.ap.be
journalistiek.ap.be
learning.ap.be
marketingblog.ap.be
inda.ap.be

Certificate

The complete raw certificate details for www.ap.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIAalPaU9mA7MYDYiSUM
K5Wa7fxmHT3nKeUwk/twaZv/qz/3faZyMlylUiCeRKAeE6qWmy04vJzWyrqGCnRG
7PjvnDhcSJ0MWbEfEoXkFoMOWsaHNoTEf4BTD27S5cNvtGulqN5d3dDOmuClDfC8
rqwqIk8Q/lwaQrtxMa3yN5v42FD8W+0KU8PLQXyk8SBxptT7chzrdawgAZ3SH60E
ghW4yeZurMafL5B/e4sSj8uD+CFcmeemsgY9T8F68sR5t9t3BovMkxbhzBVmM473
vFp8voOg9/yV5UcI5PW6gDQDIaObqyAqDpwSwYaqzSNh26YtRC8uFXVK839Wj3Yn
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 236126232514361968506494941711049826747
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Antwerpen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Artesis Plantijn Hogeschool Antwerpen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ap.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21776158809837647272731188450748503044235697469204443957089009460022754125766239904678955404132890877057028348605750218594850007211104931898233194314166721481842897042076590253274883381964352453689198665312370640381817763101872037246755466301318480876227159311855598744994057966617054010034570700044311994363399070831854733736575416083619760309376262920998009541337780478687558033888458601297385031011963013609207498438496971569208088127395294924641733684622173834725468503098617111714274577900036602285416278003941593934512999032610913105485594834216435243548444334367585642734889554266417323322460030729156199589743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95acadfdebf189678bea5d4c0401ec4711d53fb3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017ef756fe4b0000040300473045022100efbbf6366d52df47d86d95c39e986d3c90868765fbe8ea294392cfab3b41d9ef02207ee134b068a0e26c1e8ba27c4d87bff25c0368e92f5024b5283cd1b69212c6c70076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000017ef756fe12000004030047304502202ef0374f0802b7752c88616206f75e47ca0ecb8809632ab377adcbd1957ee40f022100afa7253c0f456e235acfa601a8f7166da326c9d9184c39093437a610a027bdab007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017ef756fde70000040300473045022100ccc5177de26f5d07ef2dae73e11f80701f1871452d3994290772308395813c6f0220442730398696282c0c8f40e1e3ccc2a113adfcca2a77d83c393905b7fb3cc032
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ap.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-arts.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mautic.ap.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ap-arts.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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