accessedge1.mykcl.info
Issued by TERENA SSL CA
About this certificate
This digital certificate with serial number f8:81:8a:bb:13:2f:38:0e:48:72:6e:53:fa:30:2d:dd was issued on by TERENA.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=accessedge1.mykcl.info,OU=Domain Control Validated
TERENA
Organization:
TERENA
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): f8:81:8a:bb:13:2f:38:0e:48:72:6e:53:fa:30:2d:ddSerial Number (int): 330321163043539122758299477523473378781
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 20:58:4d:8e:f0:93:43:f8:0c:de:82:05:b2:81:7f:45:19:8a:4d:05
AuthorityKeyId: 0c:bd:93:68:0c:f3:de:ab:a3:49:6b:2b:37:57:47:ea:90:e3:b9:ed
Fingerprint (sha1): b7:de:47:06:08:80:fa:60:07:e0:9d:57:d0:dd:64:bc:fb:10:88:fe
Fingerprint (sha256): 08:f3:fe:4b:96:39:d8:15:b1:1d:50:26:0d:60:07:62:0f:c4:f8:59:7f:f2:89:72:01:75:44:cc:79:ac:0a:9f
Issuing Certificate URL: http://crt.tcs.terena.org/TERENASSLCA.crt
Revocation information
OCSP Server: http://ocsp.tcs.terena.orgCRL Distribution Point: http://crl.tcs.terena.org/TERENASSLCA.crl
Check the revocation status for certificate accessedge1.mykcl.info
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for accessedge1.mykcl.info
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
accessedge1.mykcl.info
avconfedge1.mykcl.info
sip.kcl.ac.uk
sip.mykcl.info
webconfedge1.mykcl.info
avconfedge1.mykcl.info
sip.kcl.ac.uk
sip.mykcl.info
webconfedge1.mykcl.info
Other certificates including the domain name mykcl.info
(limited to 100 certificates)
Certificate
The complete raw certificate details for accessedge1.mykcl.info in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEyjCCA7KgAwIBAgIRAPiBirsTLzgOSHJuU/owLd0wDQYJKoZIhvcNAQEFBQAw NjELMAkGA1UEBhMCTkwxDzANBgNVBAoTBlRFUkVOQTEWMBQGA1UEAxMNVEVSRU5B IFNTTCBDQTAeFw0xNDAxMjcwMDAwMDBaFw0xNzAxMjYyMzU5NTlaMEQxITAfBgNV BAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRlZDEfMB0GA1UEAxMWYWNjZXNzZWRn ZTEubXlrY2wuaW5mbzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK3F Zh3xbns7/5EkArVDIm0I6KQwTz6H92DimlRc1CsZ1GmDPcVRy1RS43xfjsSgEmWa Dq4XlkAonu9CBW3cnw+jUBC+7vinhTW2/tF040PurAt9ubyiE4q2hs0fQ2j13ssE LDUzsdFNqDfVnX9uDQqS1H3RS0Fj6cgyC+miYUnfvuDjT8ambi95Mo+1oC56NsCy 9e3YZquQAFNDXnKzYqqv13HCEVdwMFrEr3JfaDSeNKjUlpv35viik3+/VyL3Jj5d Hd8p2nehpNn7faedXh2CAI1irveg893UOQFdV0oMxcRbJ3EcOZ4henLfG0DT6iPL nDJh5Nx4FB2SrvOi3vMCAwEAAaOCAcMwggG/MB8GA1UdIwQYMBaAFAy9k2gM896r o0lrKzdXR+qQ47ntMB0GA1UdDgQWBBQgWE2O8JND+AzeggWygX9FGYpNBTAOBgNV HQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwIgYDVR0gBBswGTANBgsrBgEEAbIxAQICHTAIBgZngQwBAgEwOgYD VR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybC50Y3MudGVyZW5hLm9yZy9URVJFTkFT U0xDQS5jcmwwbQYIKwYBBQUHAQEEYTBfMDUGCCsGAQUFBzAChilodHRwOi8vY3J0 LnRjcy50ZXJlbmEub3JnL1RFUkVOQVNTTENBLmNydDAmBggrBgEFBQcwAYYaaHR0 cDovL29jc3AudGNzLnRlcmVuYS5vcmcwcQYDVR0RBGowaIIWYWNjZXNzZWRnZTEu bXlrY2wuaW5mb4IWYXZjb25mZWRnZTEubXlrY2wuaW5mb4INc2lwLmtjbC5hYy51 a4IOc2lwLm15a2NsLmluZm+CF3dlYmNvbmZlZGdlMS5teWtjbC5pbmZvMA0GCSqG SIb3DQEBBQUAA4IBAQABTR+wZpSVwTTSfuyWQcTZGw3EN7x+VtDTg4Rq01Ol3Dx6 /mNG6EJt5CgnNtnMH3cT3QjSZilivq7xvXHCc2ag4khkJCfh48Wd/8pESr3DDuj7 3jfx4WEAZJygomEcHZkCYfMJHHTcM3DBc+seuRkXLm0+PcWkMTDwBZQopIyzDF+M CZfHtROOGKkR1oA5HvHlgGG517JBwNh1aoFAqCgfgJV0N6JU1O+FSTOD+Z5FEuf7 zKGXgVc7qx1Kjxp2eJ3VAf68wXKNaOdU52d87amXoIAu3vLXQuUPqlC58oby463z xmXfuwuFTeQgWi29E453hUw0fk/JqMZyufXzEgRt -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcVmHfFuezv/kSQCtUMi bQjopDBPPof3YOKaVFzUKxnUaYM9xVHLVFLjfF+OxKASZZoOrheWQCie70IFbdyf D6NQEL7u+KeFNbb+0XTjQ+6sC325vKITiraGzR9DaPXeywQsNTOx0U2oN9Wdf24N CpLUfdFLQWPpyDIL6aJhSd++4ONPxqZuL3kyj7WgLno2wLL17dhmq5AAU0NecrNi qq/XccIRV3AwWsSvcl9oNJ40qNSWm/fm+KKTf79XIvcmPl0d3ynad6Gk2ft9p51e HYIAjWKu96Dz3dQ5AV1XSgzFxFsncRw5niF6ct8bQNPqI8ucMmHk3HgUHZKu86Le 8wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 330321163043539122758299477523473378781 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-26 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'accessedge1.mykcl.info' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21936567781904078840693994276123323403432061800486947363908777397807409614881044242559112630704003694775373365880183489673156256598025817331346135229229201480401445258031888759684226364301235314789773183503176072765337140088524902855350056872348553270865691672213308786569364638079890241231218273191918462570263778879973105211191662918000172939249828362099730845534752958993150900115826533103080522765255280614125169713740058732987301177211224937070925413114913501483689588180817540743576863470814859086405382608341631694459193183453631632159139082462113039349448294607740848505888929156733680946281456236485631205107 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cbd93680cf3deaba3496b2b375747ea90e3b9ed . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 20584d8ef09343f80cde8205b2817f45198a4d05 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.tcs.terena.org/TERENASSLCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.tcs.terena.org/TERENASSLCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tcs.terena.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessedge1.mykcl.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avconfedge1.mykcl.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.kcl.ac.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.mykcl.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconfedge1.mykcl.info' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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