sourcekettle.ecs.soton.ac.uk

Issued by TERENA SSL CA 2

About this certificate

This digital certificate with serial number ac:51:8c:2e:0f:14:78:dc:83:db:45:fc:10:ee:61:49 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sourcekettle.ecs.soton.ac.uk,OU=Domain Control Validated

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): ac:51:8c:2e:0f:14:78:dc:83:db:45:fc:10:ee:61:49
Serial Number (int): 229050634507053862482860040464767017289
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 40:5f:70:68:ec:31:95:d1:30:cd:71:27:4e:cd:d2:56:41:a9:44:5f
AuthorityKeyId: 5b:d0:8a:1c:9a:32:5b:e0:b5:dd:96:54:1b:e1:86:28:b0:fd:b6:bd

Fingerprint (sha1): 75:68:2d:61:b8:9d:fa:c9:fb:2a:ed:08:48:aa:93:35:0e:8d:ad:76
Fingerprint (sha256): 0a:4d:df:b9:7e:83:ce:e2:16:b6:72:65:08:c4:1b:a4:5e:df:d5:d1:83:8f:2d:34:59:ec:fa:ad:95:15:fe:70

Issuing Certificate URL: http://crt.usertrust.com/TERENASSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TERENASSLCA2.crl

Check the revocation status for certificate sourcekettle.ecs.soton.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sourcekettle.ecs.soton.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sourcekettle.ecs.soton.ac.uk

Other certificates including the domain name soton.ac.uk

(limited to 100 certificates)
outlookanywhere.exchange.devdomain.soton.ac.uk
survey.caa.soton.ac.uk
*.lifeguidewebsites.org
southampton.ac.uk
edshare.soton.ac.uk
status.dev.soton.ac.uk
cima.ecs.soton.ac.uk
www.edshare.soton.ac.uk
personal.soton.ac.uk
oesnet.noc.soton.ac.uk
www.assignments.soton.ac.uk
thz.soton.ac.uk
cco.geodata.soton.ac.uk
blogs.chem.soton.ac.uk
imap.ecs.soton.ac.uk
www.lifeguideonline.org
wegov.it-innovation.soton.ac.uk
www.adminservices.soton.ac.uk
www.feeintranet.soton.ac.uk
landss.soton.ac.uk
deepcholesterol.soton.ac.uk
go.soton.ac.uk
external.sharepoint.soton.ac.uk
game.ecs.soton.ac.uk
vesselnoise.soton.ac.uk
coursecast.soton.ac.uk
www.taster.ecs.soton.ac.uk
inteumweb.soton.ac.uk
corporate.wordpress.soton.ac.uk
teachingaccessibility.soton.ac.uk
moodle.ecs.soton.ac.uk
connect.devdomain.soton.ac.uk
srv01816.soton.ac.uk
www.cite.soton.ac.uk
smtp.soton.ac.uk
devecs.ecs.soton.ac.uk
edshare.soton.ac.uk
www.outlook.devdomain.soton.ac.uk
*.robpress.ecs.soton.ac.uk
pre-prod.jobs.soton.ac.uk
synote.soton.ac.uk
examtimetable.soton.ac.uk
www.payments.soton.ac.uk
www.idcard.soton.ac.uk
elanguages.soton.ac.uk
sharepoint.soton.ac.uk
fwa.soton.ac.uk
modulereportdev.soton.ac.uk
env.ecs.soton.ac.uk
placements.soton.ac.uk
qtt.phys.soton.ac.uk
qlikview.soton.ac.uk
pure.soton.ac.uk
cima.ecs.soton.ac.uk
www.it-innovation.soton.ac.uk
extreg.soton.ac.uk
www.onlinema.soton.ac.uk
baxendale.gofit.soton.ac.uk
doxygen.mountainsensing.org
sourcekettle.ecs.soton.ac.uk
www.outlook.soton.ac.uk
forge.ecs.soton.ac.uk
doxygen.mountainsensing.org
autodiscover.soton.ac.uk
www.shared.soton.ac.uk
www.payments.soton.ac.uk
webmail.soton.ac.uk
data.southampton.ac.uk
cima.ecs.soton.ac.uk
arm.ecs.soton.ac.uk
async.exchange.devdomain.soton.ac.uk
devecs.ecs.soton.ac.uk
*.it-innovation.soton.ac.uk
wendy.ecs.soton.ac.uk
jobs.soton.ac.uk
ise-psn3.netauth.soton.ac.uk
www.techsup.ecs.soton.ac.uk
cima.ecs.soton.ac.uk
srv00585.soton.ac.uk
www.som.soton.ac.uk
my2.pprd.soton.ac.uk
marc.ecs.soton.ac.uk
payrolldata.soton.ac.uk
iarss.soton.ac.uk
provenance.ecs.soton.ac.uk
humanitiesresearch.soton.ac.uk
planon.soton.ac.uk
logon.pprd.soton.ac.uk
orcid.soton.ac.uk
www.gradbook.soton.ac.uk
repec.soton.ac.uk
jenkins.ecs.soton.ac.uk
www.archives.soton.ac.uk
fshms-gradschool.southampton.ac.uk
nischr.soton.ac.uk
doxygen.mountainsensing.org
*.ext.soton.ac.uk
tryjoommf.soton.ac.uk
blogs.chem.soton.ac.uk
www.survey.devdomain.soton.ac.uk

Certificate

The complete raw certificate details for sourcekettle.ecs.soton.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 229050634507053862482860040464767017289
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sourcekettle.ecs.soton.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 939292547289912121317114975708048013502297544488559016621283414233330518601930936590287233645833003185298685118312854275695700205441461243050567079369166201415825554115152524241591354503389804122840328514636233090160936263910576439201774423878000609277925651244554255065952627016285335331302307751855637370728742239691216957943708384550268414350832399396204173525995827137575731727445720712647179795525432530057458191856008653512567776176433021870201833698504219646427525048456679144524533641375818468095269167134134106943752619957294807730102336999345297199266193656900021707980757378717418272991529710249608403286631723501913978074571040869497834971805325201493655006942669928152220661316220212319708957310544054628011284195072666540673826597810666594730643093553715169344646072315297677607453978983478909432990026674778596926544516288356403234416839860424348110873169732570762419664768963597289131039465489189915793926327560296702092202436762135284184211112823861573988562821726174596376924088982050245677170107917898505581035786282532819123927508654131499712282459950006990214896615597326349634749965886296318412400364602396875059828592118552088469372734073343716169303415310099547185900186254534618155841617516218091921775647431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5bd08a1c9a325be0b5dd96541be18628b0fdb6bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							405f7068ec3195d130cd71274ecdd25641a9445f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TERENASSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TERENASSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcekettle.ecs.soton.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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