portal.stats.ox.ac.uk

- University of Oxford -

Issued by Trend Micro S2 CA

About this certificate

This digital certificate with serial number 2f:31:4c:5f:54:ef:b9:b3 was issued on by Trend Micro Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Oxford

Organization: University of Oxford
State / Province: Oxfordshire
Locality: Oxford
Country: GB

Trend Micro Inc

Organization: Trend Micro Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:31:4c:5f:54:ef:b9:b3
Serial Number (int): 3400583165972036019
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 20:14:ba:33:72:0e:be:89:f8:9c:e6:53:f8:9e:c4:f7:00:64:72:03
AuthorityKeyId: b0:99:e1:90:4e:f3:65:63:28:9c:12:3f:78:56:ba:84:c0:c7:3a:3d

Fingerprint (sha1): bb:b6:0b:3c:7b:3b:a6:3b:d5:b9:db:ef:36:f5:4a:64:48:f4:ab:96
Fingerprint (sha256): 01:c3:b0:c3:67:0b:7f:bb:9a:cc:be:ca:04:86:a1:03:d7:06:36:b3:e3:27:2b:51:9d:2a:e1:8f:ad:3f:0a:02

Issuing Certificate URL: http://ocsp.trendmicro.com/tms2ca.crt

Revocation information

OCSP Server: http://ocsp.trendmicro.com/tms2ca
CRL Distribution Point: http://crl.trendmicro.com/crl/tms2ca.crl

Check the revocation status for certificate portal.stats.ox.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.stats.ox.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.stats.ox.ac.uk

Other certificates including the domain name ox.ac.uk

(limited to 100 certificates)
idp.iamtest.ox.ac.uk
sn.sdc.ox.ac.uk
toothless.glam.ox.ac.uk
asmeals.chch.ox.ac.uk
sbs-libprox.sbs.ox.ac.uk
grasp-bestpractice.octru.ox.ac.uk
drupal-pilot-rai.it.ox.ac.uk
seldenmap.bodleian.ox.ac.uk
bits.uas.ox.ac.uk
web.crested-test.haiku.fry-it.com
www.ict.ox.ac.uk
webcms-app-td.nsms.ox.ac.uk
community.bsg.ox.ac.uk
community.bsg.ox.ac.uk
ball.gtc.ox.ac.uk
autodiscover.nexus.ox.ac.uk
mobile.chorus.ox.ac.uk
golab.bsg.ox.ac.uk
tabul.ndorms.ox.ac.uk
print.new.ox.ac.uk
gbrowse.molbiol.ox.ac.uk
webmail.isis.ox.ac.uk
*.web.ox.ac.uk
isupplier.uas.ox.ac.uk
network.rhodeshouse.ox.ac.uk
castrovalva.it.ox.ac.uk
ssl1.aluminati.net
dpuk.fmrib.ox.ac.uk
grasp-bestpractice.octru.ox.ac.uk
ouclf.law.ox.ac.uk
www2.oxford-man.ox.ac.uk
exprodo.fmrib.ox.ac.uk
trainforpedhiv.conted.ox.ac.uk
zoo-godfray.zoo.ox.ac.uk
print.lmh.ox.ac.uk
zoo-kfoster.zoo.ox.ac.uk
openclinica2.ocdem.ox.ac.uk
e2.shared.global.fastly.net
hrisprd.uas.ox.ac.uk
zoo-oxlel.zoo.ox.ac.uk
status.museums.ox.ac.uk
minerva.maths.ox.ac.uk
lists.maths.ox.ac.uk
e2.shared.global.fastly.net
incapsula.com
www.alumniweb.ox.ac.uk
epos.merton.ox.ac.uk
dars-project-training.bsp.ox.ac.uk
ibme-linuxdev.eng.ox.ac.uk
talks-dev.oucs.ox.ac.uk
rramp-test.octru.ox.ac.uk
bits.uas.ox.ac.uk
zoo-nercdtp.zoo.ox.ac.uk
fe1.chorus.ox.ac.uk
www.ml.ox.ac.uk
mimas.sgc.ox.ac.uk
webcms-1.nsms.ox.ac.uk
admn-sql03.connect.ox.ac.uk
cposxfs01.physics.ox.ac.uk
nsmsweb44.nsms.ox.ac.uk
printing.wadham.ox.ac.uk
app-vadalog.cs.ox.ac.uk
www.conted.ox.ac.uk
rramp-test.octru.ox.ac.uk
www.occt.ox.ac.uk
mysite.nexus.ox.ac.uk
www.bodleian.ox.ac.uk
spivey.oriel.ox.ac.uk
office-nextcloud-mmsid.ouce.ox.ac.uk
dars-website-test-one.bsp.ox.ac.uk
case-sql01.connect.ox.ac.uk
ridd.octru.ox.ac.uk
gower.octru.ox.ac.uk
sjc-kx.sjc.ox.ac.uk
malmecc.eu
webmail.earth.ox.ac.uk
dse.oucs.ox.ac.uk
sansonegroup.eng.ox.ac.uk
files.new.ox.ac.uk
analytics.spc.ox.ac.uk
medievalpaternosterwheels.bodleian.ox.ac.uk
tolkien.bodleian.ox.ac.uk
munki.orchard.ox.ac.uk
www.greenlightcreative.co.uk
staging.gatewayticketing.hosting
nsmsweb44.nsms.ox.ac.uk
www.mpls.ox.ac.uk
shapestacks.robots.ox.ac.uk
incapsula.com
webmail.earth.ox.ac.uk
owa.nexus.ox.ac.uk
live2.podcasts.ox.ac.uk
portal.stats.ox.ac.uk
bcfw.balliol.ox.ac.uk
www.kellogg.ox.ac.uk
drupaldev.conted.ox.ac.uk
worc-argon.worc.ox.ac.uk
members.hmc.ox.ac.uk
muninn.pmb.ox.ac.uk
mail.physiol.ox.ac.uk

Certificate

The complete raw certificate details for portal.stats.ox.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryWYQffvWQCdby5m+L8E
SDg/zdt9IyUZY25CX9g7aZYF2+yqWVZMyVK5e86YVpTtyZ83DJkP00LHMGwNDWV0
n92naEPSvzUcjENuOxJ1pH839Jhzt8hN2a8pZvGgZJWZiB5HERjPPwBHHA3AJ4tz
4fYe6Q+5KQy/Ha7cNinIz6VrwgB+oB850/0RKSWrNhGyw89FLoeVjb6KL19FH3lG
vlWsI8HCcYD5wJkYETSdc/rmgvqEAbjDt76WKP22u+BMAbzK/2GWjEEQflU3AayA
QON+kQ0rGeK1QUfA9TtjYntkJJdXTPQYUtmbBDHNYkPAO/gV0QsM2g009kb494wu
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3400583165972036019
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trend Micro Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trend Micro S2 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-30 15:34:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-12 14:07:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Oxfordshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Oxford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Oxford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'portal.stats.ox.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22110242034484927769944999042126472795516795469386332100798635382737725805601842735780697578413516987779642846325707072473154726189262913245561496385864106256024306703982938658573866490826438726993045464059409015268290238635406291189790982880191144851725589209149987319083722394880057031620470050429465667866105787983311459189676236222090780433503760150689255951783229430665684568813854121188214725733458603648145895942941222763358204409670635994208041786858002789449995490960273420164474648623327380309843702165000706725016142462453682759424969068828429111889416930850922678847701271108525340578598912655487969013487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trendmicro.com/tms2ca.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trendmicro.com/tms2ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2014ba33720ebe89f89ce653f89ec4f700647203
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b099e1904ef36563289c123f7856ba84c0c73a3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://ssl.trendmicro.com/resources/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.trendmicro.com/crl/tms2ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.stats.ox.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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