pnp.arch.cam.ac.uk

- The University of Cambridge -

Issued by Cybertrust Educational CA

About this certificate

This digital certificate with serial number 01:00:00:00:00:01:21:8b:ab:e4:cd was issued on by Cybertrust.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

The University of Cambridge

Organization: The University of Cambridge
Organization unit: Department of Archaeology
State / Province: England
Locality: Cambridge
Country: GB

Cybertrust

Organization: Cybertrust
Organization unit: Educational CA
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:00:00:00:01:21:8b:ab:e4:cd
Serial Number (int): 1208925819615872763552973
Serial Number lenght: 81 bits, 11 octets

SubjectKeyId: dd:9f:03:06:7c:ee:24:8c:99:93:67:97:28:09:b8:36:bd:11:ed:f4
AuthorityKeyId: 65:65:a3:3d:d7:3b:11:a3:0a:07:25:37:c9:42:4a:5b:76:77:50:e1

Fingerprint (sha1): 2e:86:a3:80:b2:4e:f6:3f:69:db:4f:d9:ce:ac:0f:e4:45:d8:06:cf
Fingerprint (sha256): 01:c6:97:1b:11:48:09:08:a7:c0:33:db:cc:de:fc:83:59:4c:43:95:ba:03:a3:a1:68:4c:fe:7b:6d:ac:7c:b2

Issuing Certificate URL: http://secure.globalsign.net/cacert/educational.crt

Revocation information

CRL Distribution Point: http://crl.globalsign.net/educational.crl

Check the revocation status for certificate pnp.arch.cam.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pnp.arch.cam.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pnp.arch.cam.ac.uk

Other certificates including the domain name cam.ac.uk

(limited to 100 certificates)
2015.gaobase.admin.cam.ac.uk
moorhen.magd.cam.ac.uk
iccs.cam.ac.uk
eh-ups1.net.homerton.private.cam.ac.uk
appleprofiles.csx.cam.ac.uk
www.payment.wolfson.cam.ac.uk
secure-euwe1-1.tessituranetwork.com
cam.ac.uk
suport.staff.utcluj.app
helpme.agilico.co.uk
webmail.medschl.cam.ac.uk
webserver.srcf.net
admissions.emeritus.org
*.st-edmunds.private.cam.ac.uk
www.jcr.magd.cam.ac.uk
cudl-prod-dev.lib.cam.ac.uk
darknessvisible.christs.cam.ac.uk
wiggum.educ.cam.ac.uk
cmih.maths.cam.ac.uk
www.kings.cam.ac.uk
www.cl.cam.ac.uk
infolib.blog.jbs.cam.ac.uk
www.lrc.girton.cam.ac.uk
winnie.srcf.net
webmail.mrc-mbu.cam.ac.uk
willow.csi.cam.ac.uk
mrc-epid.cam.ac.uk
www.cardiovascular.cam.ac.uk
whittle3d.eng.cam.ac.uk
accreditation.lumanity.com
apps.newn.cam.ac.uk
falcon-course.csx.cam.ac.uk
itservices.phy.cam.ac.uk
alumnicredentials.kcl.ac.uk
www.amest2020.eng.cam.ac.uk
camtools.admin.cam.ac.uk
go.jbs.cam.ac.uk
svr-swm11-bluespec.cl.cam.ac.uk
webapp.prod.rh-ballots.gcp.uis.cam.ac.uk
www.cne.psychol.cam.ac.uk
admin.phone.cam.ac.uk
secure-euwe1-1.tessituranetwork.com
learnonline3.cisl.cam.ac.uk
faraday.cam.ac.uk
econ.cam.ac.uk
intranet.geog.cam.ac.uk
achievements.launchyou.com
www.rnd2016.eng.cam.ac.uk
myip-external.uis.cam.ac.uk
shop.girton.cam.ac.uk
svr-rnw24-bsdcam.cl.cam.ac.uk
production.media.cam.ac.uk
imaging-xnat.cruk.cam.ac.uk
dada.cl.cam.ac.uk
www.eprg.group.cam.ac.uk
gradoffrt.maths.cam.ac.uk
cucmpub-a01-ms.phone.private.cam.ac.uk
www.syslog.cl.cam.ac.uk
www.eprg.group.cam.ac.uk
staging.apply.graduate.study.cam.ac.uk
live.deposit.dps.lib.cam.ac.uk
scop.mrc-lmb.cam.ac.uk
websvr-dev.newn.cam.ac.uk
pnp.arch.cam.ac.uk
heliconius.org
everify.cam.ac.uk
stage.learn.jbs.cam.ac.uk
map.cam.ac.uk
jbs.cam.ac.uk
www.eu.admin.cam.ac.uk
www.ccbi.cam.ac.uk
www-library.ch.cam.ac.uk
www.cbsb-4rdatabase.medschl.cam.ac.uk
www.cccw.cam.ac.uk
safety.eng.cam.ac.uk
www.interfaith.cam.ac.uk
helpdesk.centurionukrs.com
www.map.cam.ac.uk
achievements.launchyou.com
camtools.cam.ac.uk
inter-ace.cl.cam.ac.uk
alumni.d9.staging.drupal.uis.cam.ac.uk
*.lib.cam.ac.uk
www.seniortutors.admin.cam.ac.uk
heritage.arch.cam.ac.uk
mi.eng.cam.ac.uk
sensorid.cl.cam.ac.uk
steth.eng.cam.ac.uk
xnat01.wbic.cam.ac.uk
www.eprg.group.cam.ac.uk
web1-test.dns.cam.ac.uk
www.winton.phy.cam.ac.uk
www.digitalhumanities.cam.ac.uk
www.ch.cam.ac.uk
www.ccs.cam.ac.uk
www.laman-lab.path.cam.ac.uk
gitlab.dtg.cl.cam.ac.uk
h2-cluster.plantsci.cam.ac.uk
forms.girton.cam.ac.uk
fwmgmt.robinson.cam.ac.uk

Certificate

The complete raw certificate details for pnp.arch.cam.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOoSWbZTYym9xjyID7hQ
pu5YaYGjlIraibQ0FcWXXtJkQ1Ahk5nYf93uBw4xi1+Sy5H/S8pPpoPjOChPEms/
k/D2x5CJBwWywIWGzlA6agd5AyPj5S/eO2a1Vndo9c01mGq3j7QQ+1Y3Bw5v59ou
80r/ETsdIcnkdKuZ61zlif72+XZW5ox3ekcZShkDoRUwtjkSdxGzJGeIuDZPuxrF
bpIKHpgtrmqkOAQ1WpeM0kzM1FNJqcgXqU1TyraTytNzx3PzTPKORSyT9rbnXsjP
VeVdtopBL5vuSOHy6p99gV5WHKlKjX+SxbZECQb1c3Ofae/w+qVxm9hwnB5NuAhR
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1208925819615872763552973
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Educational CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Educational CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-05-29 08:24:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-05-29 08:24:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'England'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambridge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The University of Cambridge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Archaeology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pnp.arch.cam.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24858132821396129826031164011191255831075755463731321640707439372292873720348291275108185285411478814095520318404963341001589677165333145106967822438581898131378409657266703779885031401493655072709880413902295817265314217823250052029981324164638680289139203821860438293783881893023003881807067376275457727462769592984500362395266020156815474156604930049883793830526175167413443803235104069086403308574409748995762737828573132212756677219049057083347403549551684575893894582225542371708561102363812991794202720893721058035993451791115887233220264312045298678212261341914775641524980584093498855489257883700254913090017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.6334.1.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.globalsign.net/repository/cps.cfm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6565a33dd73b11a30a072537c9424a5b767750e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd9f03067cee248c999367972809b836bd11edf4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.net/educational.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.net/cacert/educational.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnp.arch.cam.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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