driscoll.ntu.ac.uk

- Nottingham Trent University -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 56:33:1c:aa:18:35:05:45:fb:69:37:03:4d:71:6e:cc:17:68:46:5c was issued on by QuoVadis Limited.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Nottingham Trent University

Organization: Nottingham Trent University
Organization unit: Information Systems
State / Province: Nottinghamshire
Locality: NOTTINGHAM
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 56:33:1c:aa:18:35:05:45:fb:69:37:03:4d:71:6e:cc:17:68:46:5c
Serial Number (int): 492113041320160497299653082389289928711584892508
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 94:c6:be:c9:0f:a4:cb:a9:f7:05:90:60:8e:2d:e3:1d:fd:57:11:b5
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 4d:9c:57:1d:db:12:18:01:24:99:e5:6d:78:89:5e:a3:1c:79:14:b9
Fingerprint (sha256): 09:70:71:ac:42:b2:81:2c:79:dc:15:a1:5b:f7:65:cd:ee:2f:e6:37:95:d2:b8:96:ca:d2:69:b9:c8:71:ac:8f

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate driscoll.ntu.ac.uk

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for driscoll.ntu.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

driscoll.ntu.ac.uk
zendto.ntu.ac.uk
rivest.ntu.ac.uk

Other certificates including the domain name ntu.ac.uk

(limited to 100 certificates)
dev-in-place.ntu.ac.uk
support.ntu.ac.uk
www.nlscitrix.ntu.ac.uk
Easyprint.ntu.ac.uk
shibidp.ntu.ac.uk
owa.exrestore.ntu.ac.uk
possibilities.ntu.ac.uk
testidp1.ntu.ac.uk
ntuanywhere.ntu.ac.uk
sip.exrestore.ntu.ac.uk
vacancies.ntu.ac.uk
vacancies.ntu.ac.uk
www.ntu.ac.uk
online.ntu.ac.uk
support.ntu.ac.uk
opac.ntu.ac.uk
cty-fe-pool-ext.ntu.ac.uk
train-in-place.ntu.ac.uk
5754435435233280-fe4.pantheonsite.io
staffpassword.ntu.ac.uk
driscoll.ntu.ac.uk
opac.ntu.ac.uk
selfservice.ntu.ac.uk
ntuanywhere.ntu.ac.uk
brackenhurst.elearn.ntu.ac.uk
smartcard.ntu.ac.uk
city-fe-pool-ext.exrestore.ntu.ac.uk
www2.ntu.ac.uk
wireless.ntu.ac.uk
elearn.ntu.ac.uk
outlook.su.ntu.ac.uk
online.ntu.ac.uk
office365.ntu.ac.uk
www2.ntu.ac.uk
ntusecurity.ntu.ac.uk
opac.ntu.ac.uk
testidp1.ntu.ac.uk
wireless.ntu.ac.uk
online.ntu.ac.uk
vacancies.ntu.ac.uk
landing.online.ntu.ac.uk
www.onlinepayments.ntu.ac.uk
strenton.com
elearn.ntu.ac.uk
lawquiz.ntu.ac.uk
in-place.ntu.ac.uk
www4.ntu.ac.uk
shibsp.ntu.ac.uk
socscibookings.ntu.ac.uk
www.nlsportal.ntu.ac.uk
sportbooking.ntu.ac.uk
warren.ntu.ac.uk
selfservice.ntu.ac.uk
support.ntu.ac.uk
owa.exrestore.ntu.ac.uk
brackenhurst.elearn.ntu.ac.uk
journals.ntu.ac.uk
siso.ntu.ac.uk
mypeople.ntu.ac.uk
vacancies.ntu.ac.uk
cas.ntu.ac.uk
owa.exrestore.ntu.ac.uk
gandalf.ads.ntu.ac.uk
online.ntu.ac.uk
possibilities.ntu.ac.uk
warren.ntu.ac.uk
curriculumrefresh.ntu.ac.uk
wake.ntu.ac.uk
www.onlinepayments.ntu.ac.uk
landing.online.ntu.ac.uk
wireless.ntu.ac.uk
krebs.ntu.ac.uk
mimas.ntu.ac.uk
thomasmore.ads.ntu.ac.uk
shib2idp.ntu.ac.uk
onlinestore.ntu.ac.uk
estates.ntu.ac.uk
strenton.com
ntusecurity.ntu.ac.uk
sip.ntu.ac.uk
socscibookings.ntu.ac.uk
lawquiz.ntu.ac.uk
myidentity.ntu.ac.uk
olympuss.ntu.ac.uk
www.ntu.ac.uk
video.ntu.ac.uk
wake.ntu.ac.uk
landing.online.ntu.ac.uk
staffpass.ntu.ac.uk
onlinestore.ntu.ac.uk
sip.exrestore.ntu.ac.uk
benga.ntu.ac.uk
ntu-interactions.ads.ntu.ac.uk
smartcard.ntu.ac.uk
artstore.ntu.ac.uk
office365.ntu.ac.uk
benga.ntu.ac.uk
testidp1v3.ntu.ac.uk
Beorn.ads.ntu.ac.uk
sip1.exrestore.ntu.ac.uk

Certificate

The complete raw certificate details for driscoll.ntu.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyq2ZPslOlEM3Oe0eivb
Fglj8uQZ4eduGPhuZuU3GfBrsOrr4iT9jdrIaB7zIKZso+ymz8NH4n8hVLTORUe4
3LBjxg6Eo3niH/NsO4mqemRJ3BLq3W8kBx4+DqdmnIOwBqyqb/31kOgUXGe4yhSe
Gth0Tar6Srnc0gXlpqLmUKffOtFqEDwm71IqR0x2oZCAJKKo8+6wjEbZN+pWOiTW
aZlA8hsfxnTT//2W/S/LCQqBxi2y1dPg/58oT7yh/i8m5s9TgFFik14NjLbdEbDc
lb7jSlknrvvirN/UOvDQNQL8kHtRTjvtjdWxuvrHFfF1Mbizc0SnIKA3g4pHM9Sf
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 492113041320160497299653082389289928711584892508
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-16 11:44:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 11:54:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nottinghamshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NOTTINGHAM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nottingham Trent University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Information Systems'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'driscoll.ntu.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21102859237408328603455049092402741760481117997415541667431855053801699965791827028160476427820995032152306632858799930972274751642429893996653482627754610926911365272047380005806837963278207424675738756393701856152052815526094207856340345992053310939570946658944150889776283628897480448849742904150923353884783426237682854246768488755434262963777596841896965781893232392212015052827089098360487396885624191541730208502059342334055886094192313009345647972945198529014045520210110332199199687580961009205485388127386559665637779912275197530277300256473310669323402276280803143309628097533612135794652979514058105724781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'driscoll.ntu.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zendto.ntu.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivest.ntu.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94c6bec90fa4cba9f70590608e2de31dfd5711b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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