*.northernart.ac.uk

- The Northern School of Art -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 3c:97:31:47:59:ae:ea:7b:2f:8a:f7:cb:b5:cd:21:a7:9d:2f:81:be was issued on by QuoVadis Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Northern School of Art

Organization: The Northern School of Art
Organization unit: IT
State / Province: Cleveland
Locality: MIDDLESBROUGH
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 3c:97:31:47:59:ae:ea:7b:2f:8a:f7:cb:b5:cd:21:a7:9d:2f:81:be
Serial Number (int): 345911151555676710308944730445937866180643488190
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 85:a3:1f:fa:4c:96:a1:10:6f:1a:da:34:83:8c:f7:99:27:a8:3f:84
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 0f:ea:37:c5:65:e8:81:12:db:2f:e4:8d:cf:cd:39:ae:ff:c6:f0:b3
Fingerprint (sha256): 06:48:62:42:6d:da:93:55:fb:af:67:e0:53:d0:d9:0b:fe:fe:61:4c:3c:21:ed:61:21:7e:b5:ed:d8:7c:28:48

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate *.northernart.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.northernart.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.northernart.ac.uk
northernart.ac.uk

Other certificates including the domain name northernart.ac.uk

(limited to 100 certificates)
www.northernart.ac.uk
*.northernart.ac.uk
moodle.northernart.ac.uk
moodle.northernart.ac.uk
moodle.northernart.ac.uk
northernart.ac.uk
adfs.northernart.ac.uk
moodle.northernart.ac.uk
moodle.northernart.ac.uk
adfs.northernart.ac.uk
northernart.ac.uk
northernart.ac.uk
northernart.ac.uk
northernart.ac.uk
northernart.ac.uk
northernart.ac.uk
northernart.ac.uk
adfs.northernart.ac.uk
moodle.northernart.ac.uk
moodle.northernart.ac.uk
moodle.northernart.ac.uk
*.northernart.ac.uk
northernart.ac.uk
moodle.northernart.ac.uk
moodle.northernart.ac.uk
northernart.ac.uk
moodle.northernart.ac.uk

Certificate

The complete raw certificate details for *.northernart.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle3LbeF9JDWJbFeHjyFi
+QI75Q5ZYFb50gmQ+/1hzmLM/hxEsUqn9R+vzolnCXuHBxebfLhFX0pKZ1vhowBT
8c36IIZi5tASaLjqZ88GbUzTHtvXfQGYq1sh79zJi4K50bL9QJxvzHjy22WPSDUK
fRn28bAxFHHE4HNQAY6ZgaRZ2w5Kfutru7rmVGyzyrit1VvPju2dnOKlbFNLWBsM
PF78TD/RcKP5dxIsdIvBSSZu/mrcqvwswoksy1B7p2X+mSQOd4FSqQnlFMuwI4du
b0zO6Xxv6DEB6ObYtdTa183ap5a99yrp1aRNacmb8hrFF7UCIbMLwfe8LPuvWHDS
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345911151555676710308944730445937866180643488190
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-01 15:49:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-01 15:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cleveland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MIDDLESBROUGH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'The Northern School of Art'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.northernart.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18926768349962548911472955411411025921276744554232906130196555804229914264913589573706331476217391026982637133135506840182090479034607910135491742854876642133743981667137713779638231837407655893333005542342105518334989328457579565091163512991809902211794142869655580563030605442858075657924873943189553915621425218966955444078172499567689135369267505916467696417890102834010413400441564994131846186425594658192098652218923339713680941806044088257309371020352967002457303462965139605375271233542842789640885697251741641721720279176280498431330896402854441608637435250321647438217248898894315361075310715223523873313329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northernart.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernart.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85a31ffa4c96a1106f1ada34838cf79927a83f84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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