OV SSL/TLS Certificate for museum.di.uoa.gr Issued to National and Kapodistrian University of Athens

Certificate is witin its validity period

Issued by Hellenic Academic and Research Institutions CA (HARICA Institutional TLS RSA 2)

About the museum.di.uoa.gr OV SSL/TLS Certificate

This certificate with serial number 79:5d:fd:ad:56:d9:8b:1f:c8:ad:60:a0:42:06:b7:df for museum.di.uoa.gr was issued on by Hellenic Academic and Research Institutions CA.

This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for museum.di.uoa.gr provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Hellenic Academic and Research Institutions CA

Organization: Hellenic Academic and Research Institutions CA
Country: GR

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 79:5d:fd:ad:56:d9:8b:1f:c8:ad:60:a0:42:06:b7:df
Serial Number (int): 161324616280799103173904208617116448735
Serial Number Length: 127 bits, 16 octets

Subject Key Identifier: c4:30:ea:44:23:e3:01:e7:74:4e:ea:b1:aa:22:62:9d:a3:6a:89:3e
Authority Key Identifier: a0:08:cf:24:ae:3b:ee:f5:77:fa:4e:2e:0c:b1:77:d9:bc:27:5e:1d

Fingerprint (SHA-1): 17:91:b1:be:3a:8d:6f:e2:f8:6e:dc:75:1e:f1:7b:13:ad:f2:6e:85
Fingerprint (SHA-256): 38:e3:7a:e0:f0:bb:4f:80:6f:78:d3:ee:ff:4d:55:3a:0e:65:83:2f:d9:50:f0:0c:99:6e:77:81:6d:89:0e:d9

Issuing Certificate URL: http://crt.harica.gr/HARICA-Institutional-TLS-Sub-R2.cer

Revocation Information

OCSP Server: http://ocsp.harica.gr
CRL Distribution Point: http://crl.harica.gr/HARICA-Institutional-TLS-Sub-R2.crl

Check the revocation status for certificate museum.di.uoa.gr
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for museum.di.uoa.gr

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Client Authentication
Server Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

museum.di.uoa.gr

X.509 Certificate

The complete raw X.509 certificate details for museum.di.uoa.gr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85l5vbU7zXvSAyihXkB+
fcZteJRuWNhVFcJNkUSHzGZDuXX2UaDC7ACEr9ANqkvVt7wW+AtLvA0FR/2N+wgB
tUAg9lG1U53Noq5THSG3ZLM8rLDKd3nJgNL3/r7VQMlluG5gHj3K9OGLrpKUFka3
fl8M2XMf/DQUiJWKOyJgLbnjMk+ki2ssdKo04RXoCkWmzFVQqEfDbS/zIqp/0YOv
hBPaVNP14nQZb1fdKyAlgdRY6xOjsx8/CHJ+5dI54t4bcHqK4ITBpU/L+mmTA+qw
ROGq/UWztU0FBgJNhfEuNKGodtgBEtZK5t7UV1IZCOWC3X8snoRj+tE1HgaJA1XT
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 161324616280799103173904208617116448735
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hellenic Academic and Research Institutions CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HARICA Institutional TLS RSA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-14 23:21:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-12-14 23:21:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Athens'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'National and Kapodistrian University of Athens'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'museum.di.uoa.gr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30751589721624760283122160431578091477334246503572064897273242381373352694563261923738069734872245773673186041318524713103969502323529122596576589068980628571178295695815100044027645863531285208459591750453374033210958753046234410483277182882566686185850460193921610877691901412655790841261441347466658129659554446489309328464171292678659248175938905844643411784402301551536716906571337254703706796742990880275946712866847056291311861048876043518979805841263636235504505132688395896475836071386187606624085017199917313213545948202265376111835329109316893292307540674054422623432416678909746522561248876997525693125569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a008cf24ae3beef577fa4e2e0cb177d9bc275e1d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.harica.gr/HARICA-Institutional-TLS-Sub-R2.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.harica.gr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museum.di.uoa.gr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.26513.1.1.1.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.harica.gr/HARICA-Institutional-TLS-Sub-R2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c430ea4423e301e7744eeab1aa22629da36a893e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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