shop.brighton.ac.uk

- University of Brighton -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 5a:e5:ed:5c:24:63:47:75:3a:71:4a:c4:8b:d4:a0:42 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

University of Brighton

Organization: University of Brighton
Organization unit: admin
State / Province: East Sussex
Locality: Brighton
Country: GB

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:e5:ed:5c:24:63:47:75:3a:71:4a:c4:8b:d4:a0:42
Serial Number (int): 120824369832575402306696493655024508994
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): de:2d:d9:6f:49:e5:48:e7:4c:0e:51:27:01:30:97:f5:76:5a:2f:06
Fingerprint (sha256): 01:56:79:f7:64:1a:87:05:cd:c8:38:4d:ee:e8:c1:b9:b8:c7:8b:99:1e:37:73:6f:0c:1d:42:e0:7b:2a:64:1a

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate shop.brighton.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.brighton.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.brighton.ac.uk

Other certificates including the domain name brighton.ac.uk

(limited to 100 certificates)
email.brighton.ac.uk
dataviewdev.brighton.ac.uk
idp.brighton.ac.uk
id.dev.brighton.ac.uk
evsidv.brighton.ac.uk
www.inam.brighton.ac.uk
researchers.brighton.ac.uk
shop.brighton.ac.uk
wadslive.brighton.ac.uk
staffmail.dev.brighton.ac.uk
evsipr.brighton.ac.uk
www.brighton.ac.uk
authenticate.brighton.ac.uk
wattsmedia.brighton.ac.uk
prism.brighton.ac.uk
shs.brighton.ac.uk
arch.brighton.ac.uk
pay.brighton.ac.uk
timetable.brighton.ac.uk
tel-ms-pro01.university.brighton.ac.uk
lists.brighton.ac.uk
mailer.brighton.ac.uk
data4impact.brighton.ac.uk
mysite.brighton.ac.uk
ahs.brighton.ac.uk
prism.brighton.ac.uk
alumni.brighton.ac.uk
emea-san1.blackboard.com
eu-central-1-san1.blackboard.com
mimosa.brighton.ac.uk
alumni.brighton.ac.uk
alumni.brighton.ac.uk
studentfolio.brighton.ac.uk
socialwork.brighton.ac.uk
peri.brighton.ac.uk
screenarchive.brighton.ac.uk
lyncwsext.brighton.ac.uk
unicard.brighton.ac.uk
dataview.brighton.ac.uk
voicemail.brighton.ac.uk
idp-test.brighton.ac.uk
remote.brighton.ac.uk
extranet.brighton.ac.uk
evsipr.brighton.ac.uk
blogs.brighton.ac.uk
studentcentral.brighton.ac.uk
uni.brighton.ac.uk
unicardcentral.brighton.ac.uk
evsite.brighton.ac.uk
studentcentralsupport.brighton.ac.uk
autodiscover.brighton.ac.uk
check-mk.brighton.ac.uk
peri.brighton.ac.uk
eu-central-1-san1.blackboard.com
mailer.brighton.ac.uk
efin5.brighton.ac.uk
shs.brighton.ac.uk
about.brighton.ac.uk
emea-san1.blackboard.com
smtp.brighton.ac.uk
dataview.brighton.ac.uk
staffmaildev.brighton.ac.uk
remote.brighton.ac.uk
email.brighton.ac.uk
autodiscoverdev.brighton.ac.uk
student.brighton.ac.uk
resource.brighton.ac.uk
emea-san1.blackboard.com
www.inam.brighton.ac.uk
eu-central-1-san1.blackboard.com
studentfoliotest.brighton.ac.uk
holiday.brighton.ac.uk
idp-test.brighton.ac.uk
stsdev.brighton.ac.uk
security.brighton.ac.uk
pay.brighton.ac.uk
blogs.brighton.ac.uk
sclink.brighton.ac.uk
eu-central-1-san1.blackboard.com
confirm.brighton.ac.uk
shs.brighton.ac.uk
issd.brighton.ac.uk
issd-dev.brighton.ac.uk
socialwork.brighton.ac.uk
peri.brighton.ac.uk
www.brighton.ac.uk
emea-san1.blackboard.com
transport.brighton.ac.uk
shop.brighton.ac.uk
studentcentraltestsupport.brighton.ac.uk
eu-central-1-san1.blackboard.com
authgen.brighton.ac.uk
pcbookings.brighton.ac.uk
tel-krnl-pro01.university.brighton.ac.uk
*.brighton.ac.uk
springboard.brighton.ac.uk
sportbookings.brighton.ac.uk
moviesandmemories.brighton.ac.uk
alumni.brighton.ac.uk
myinfo.brighton.ac.uk

Certificate

The complete raw certificate details for shop.brighton.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3I11zJP0NdzeMe402rh
C/XGrXdjGAmdpqIB8/x3i2VZy/uhhIeTw21DdAIuq1bYaHhzkJnJ47nxElM3iRpg
cUqr0l6CPQ9XNPiKjYvXWHWmYpLnPXLjw99TDrHq0ro9mXjjnwel0FkDN6E9ky9a
6wMmjd+gzmWPt6rA+uOKsTcxdujvKU6R+OArBJcMxLcQeW5Dt65ByxX/oqZw4UZo
dTxDCHBy9+GZBlxA0fkcts+vsicpXcrXdtJFZfjB9sJBOAoCWqQmbiavZzPXbqkX
8QVjBlJ4bpsdxsXGapQvIPC7qg/Fz+JPEq0HZDIpViCiJ+D0H8gOjPcQIGQOes5/
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 120824369832575402306696493655024508994
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'East Sussex'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Brighton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Brighton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'admin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'shop.brighton.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19118303255191881392025560015231380630027839693928839848775946178990839488712042534616222961101888993679702369990254273066071957944589155201659925463237867508157767634987327012965729592455014168831155134204495310192643566969143554005309694153281379266317967453634496259035396784820541661747094806939422959877867501007275624527656601799824350072510130923044050203103630986051000825049043876399622250627006513394843081521578602953945813244094175549038418056035501916917680827317733285890456030269398888458783369400068782073010075123331247067723617991178459108598814070484665794404133202665371454302486042921833321103131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.brighton.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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