www.ntu.ac.uk

Issued by GlobalSign Domain Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:f4:d3:24:1d:90:ae:a6:1f:f8:55:f6:88:2c:a7:6e:15 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Certificate Subject

CN=www.ntu.ac.uk,OU=Domain Control Validated,C=GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:f4:d3:24:1d:90:ae:a6:1f:f8:55:f6:88:2c:a7:6e:15
Serial Number (int): 1492463606886432972031899069835829318217237
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 06:8c:32:94:7e:07:8e:7f:81:9d:c8:86:ef:3c:61:dc:92:bc:c7:a9
AuthorityKeyId: 96:ad:fa:b0:5b:b9:83:64:2a:76:c2:1c:8a:69:da:42:dc:fe:fd:28

Fingerprint (sha1): 3c:28:37:b0:4a:0b:f8:01:02:0a:23:03:6d:2f:10:72:a4:05:ff:09
Fingerprint (sha256): 05:3d:ce:33:38:63:e9:5d:11:d9:7d:3a:1d:cb:99:60:16:06:ec:06:ca:3d:1b:fd:50:7e:4f:ca:4d:c5:12:32

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalg2.crl

Check the revocation status for certificate www.ntu.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ntu.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ntu.ac.uk
ntu.ac.uk

Other certificates including the domain name ntu.ac.uk

(limited to 100 certificates)
dev-in-place.ntu.ac.uk
support.ntu.ac.uk
www.nlscitrix.ntu.ac.uk
Easyprint.ntu.ac.uk
shibidp.ntu.ac.uk
owa.exrestore.ntu.ac.uk
possibilities.ntu.ac.uk
testidp1.ntu.ac.uk
ntuanywhere.ntu.ac.uk
sip.exrestore.ntu.ac.uk
vacancies.ntu.ac.uk
vacancies.ntu.ac.uk
www.ntu.ac.uk
online.ntu.ac.uk
support.ntu.ac.uk
opac.ntu.ac.uk
cty-fe-pool-ext.ntu.ac.uk
train-in-place.ntu.ac.uk
5754435435233280-fe4.pantheonsite.io
staffpassword.ntu.ac.uk
driscoll.ntu.ac.uk
opac.ntu.ac.uk
selfservice.ntu.ac.uk
ntuanywhere.ntu.ac.uk
brackenhurst.elearn.ntu.ac.uk
smartcard.ntu.ac.uk
city-fe-pool-ext.exrestore.ntu.ac.uk
www2.ntu.ac.uk
wireless.ntu.ac.uk
elearn.ntu.ac.uk
outlook.su.ntu.ac.uk
online.ntu.ac.uk
office365.ntu.ac.uk
www2.ntu.ac.uk
ntusecurity.ntu.ac.uk
opac.ntu.ac.uk
testidp1.ntu.ac.uk
wireless.ntu.ac.uk
online.ntu.ac.uk
vacancies.ntu.ac.uk
landing.online.ntu.ac.uk
www.onlinepayments.ntu.ac.uk
strenton.com
elearn.ntu.ac.uk
lawquiz.ntu.ac.uk
in-place.ntu.ac.uk
www4.ntu.ac.uk
shibsp.ntu.ac.uk
socscibookings.ntu.ac.uk
www.nlsportal.ntu.ac.uk
sportbooking.ntu.ac.uk
warren.ntu.ac.uk
selfservice.ntu.ac.uk
support.ntu.ac.uk
owa.exrestore.ntu.ac.uk
brackenhurst.elearn.ntu.ac.uk
journals.ntu.ac.uk
siso.ntu.ac.uk
mypeople.ntu.ac.uk
vacancies.ntu.ac.uk
cas.ntu.ac.uk
owa.exrestore.ntu.ac.uk
gandalf.ads.ntu.ac.uk
online.ntu.ac.uk
possibilities.ntu.ac.uk
warren.ntu.ac.uk
curriculumrefresh.ntu.ac.uk
wake.ntu.ac.uk
www.onlinepayments.ntu.ac.uk
landing.online.ntu.ac.uk
wireless.ntu.ac.uk
krebs.ntu.ac.uk
mimas.ntu.ac.uk
thomasmore.ads.ntu.ac.uk
shib2idp.ntu.ac.uk
onlinestore.ntu.ac.uk
estates.ntu.ac.uk
strenton.com
ntusecurity.ntu.ac.uk
sip.ntu.ac.uk
socscibookings.ntu.ac.uk
lawquiz.ntu.ac.uk
myidentity.ntu.ac.uk
olympuss.ntu.ac.uk
www.ntu.ac.uk
video.ntu.ac.uk
wake.ntu.ac.uk
landing.online.ntu.ac.uk
staffpass.ntu.ac.uk
onlinestore.ntu.ac.uk
sip.exrestore.ntu.ac.uk
benga.ntu.ac.uk
ntu-interactions.ads.ntu.ac.uk
smartcard.ntu.ac.uk
artstore.ntu.ac.uk
office365.ntu.ac.uk
benga.ntu.ac.uk
testidp1v3.ntu.ac.uk
Beorn.ads.ntu.ac.uk
sip1.exrestore.ntu.ac.uk

Certificate

The complete raw certificate details for www.ntu.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492463606886432972031899069835829318217237
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-05-06 18:06:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-05-07 18:06:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ntu.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 720917785455531723254827774716347764395310664788272514770108697247191613431442813157716431034274483621461853947262955829516690477275146232560476714852568337164074565057234353553007466443984799489619692680988614583818921878216970770545830914406764674176124678114144664494716125068627442585352567819929605649430546246529179781116133498745518427160186026221381455632233296467448667017917906458793027109948586375575806732690224919348171253506839128612250653191153115775310905933785726399166134470222825930671522752214750439825061628690067747843715190138391675430501435001836102127115794003665337960267485159407379032758623705432860401406678537604330807138191987971390964615822300169867868355333439246599833344145948022560349907259102083138905219991488963473634209145720479334551364177887608191732887592735265373535398838667000333510280919339152074519589103973872537266558837087888166387658245712443957819670482962924519177143067550905512648692701771139568562530314367221356668554433686834067864671084234364583492020293215096931439946905069505685888014535654145736119890124856180216297720398992505945304006428846268293831746382622634415934610430352005811661873214248093059228916504503993648098469293352287112358743645078428530980559001631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntu.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntu.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							068c32947e078e7f819dc886ef3c61dc92bcc7a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96adfab05bb983642a76c21c8a69da42dcfefd28
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004b3dbe9f29c6b0f75419b245424e342ac94a373990dde11d25ea1c9b174b0238927ecc8261f0d94871b6dd0d8a62d4f4c1d9f022c4f7bb861a3e09826d4928037b0f9c6d6bb72c4d215c4e5b7b59ee4cb22d61aac78b698c229028f9cc9e2591ec03da0ded9040afbc049ff06adcfccb1c8e120a4bf689852d78663a8a4ff9e16d70254634075e82bf25be25a4cac1e3609b146b1375458127bc86114f7df6f69d49bccad3d494143acca92ab01cdd688e97ee998843e01fa7167b07900bd2f348f6087975d0e3f90e02989c6534a824322d8be7fd1c65139622efcc8bd5329f5b1e8f769c1742ec50a1789be6283da8bb27df20dd50a33786ee5c2bf4ed5305