cran.ma.imperial.ac.uk

- Imperial College of Science, Technology and Medicine -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 9d:88:7e:7b:04:cc:ef:f8:a1:e4:55:e5:df:f3:ee:81 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Imperial College of Science, Technology and Medicine

Organization: Imperial College of Science, Technology and Medicine
State / Province: London, City of
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 9d:88:7e:7b:04:cc:ef:f8:a1:e4:55:e5:df:f3:ee:81
Serial Number (int): 209397513041152272106899041456659623553
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: aa:1a:09:90:e5:3d:fc:ae:25:f0:3e:dc:4c:15:5f:27:c6:88:d0:36
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 63:1c:0b:72:b4:b3:9c:bf:bb:89:23:2c:59:37:f6:6a:fc:59:e6:13
Fingerprint (sha256): 0a:87:30:29:9e:0c:42:7c:e9:d6:fd:0e:cb:0b:f1:e4:f7:5e:e3:21:e0:16:52:5c:4e:37:4a:4a:08:57:a0:24

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate cran.ma.imperial.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cran.ma.imperial.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cran.ma.imperial.ac.uk
www.cran.ma.imperial.ac.uk

Other certificates including the domain name imperial.ac.uk

(limited to 100 certificates)
admissions.emeritus.org
accreditation.lumanity.com
alumnicredentials.kcl.ac.uk
www3.imperial.ac.uk
achievements.launchyou.com
forms.imperial.ac.uk
plexus.imperial.ac.uk
achievements.launchyou.com
exchange.imperial.ac.uk
eu.prod.campusgroups.com
shibboleth.imperial.ac.uk
remotehelp.ic.ac.uk
events.imperial.ac.uk
ichtb.med.imperial.ac.uk
accreditation.lumanity.com
servicemgtdev.imperial.ac.uk
wwwf.imperial.ac.uk
eu.prod.campusgroups.com
data.hpc.imperial.ac.uk
dataman.bioinformatics.ic.ac.uk
library-search.imperial.ac.uk
plexus.imperial.ac.uk
achievements.launchyou.com
icva.hep.ph.ic.ac.uk
gallego.bg.ic.ac.uk
rpssicprj06.imperial.ac.uk
office.imperial.ac.uk
ukcosmos.imperial.ac.uk
secureaccess.imperial.ac.uk
achievements.launchyou.com
ictsmartprd.cc.ic.ac.uk
wwwd.imperial.ac.uk
saml.imperial.ac.uk
accreditation.lumanity.com
media.imperial.ac.uk
ictprintservice-colour.cc.ic.ac.uk
fseuc-2.freshservice.com
cran.ma.imperial.ac.uk
admissions.emeritus.org
zenoss.hpc.imperial.ac.uk
accreditation.lumanity.com
cran.ma.imperial.ac.uk
rpssicprj03.imperial.ac.uk
eu.prod.campusgroups.com
search.imperial.ac.uk
accreditation.lumanity.com
www.counselling-form.imperial.ac.uk
search.imperial.ac.uk
admissions.emeritus.org
support.klaxon.io
hml.imperial.ac.uk
www.medbio.imperial.ac.uk
halls.imperial.ac.uk
plexus.imperial.ac.uk
imperial.ac.uk
prdsoa.imperial.ac.uk
wlsprd.imperial.ac.uk
mobile.imperial.ac.uk
imperial.ac.uk
www1.imperial.ac.uk
ictu-trial.cc.ic.ac.uk
admissions.emeritus.org
www3.imperial.ac.uk
wiki.imperial.ac.uk
admissions.emeritus.org
google.imperial.ac.uk
rpssicissan.imperial.ac.uk
forms.imperial.ac.uk
ictsgw.cc.ic.ac.uk
fseuc-2.freshservice.com
events.imperial.ac.uk
hml.imperial.ac.uk
exec-info.imperial.ac.uk
dcwadmin.imperial.ac.uk
asset-library.imperial.ac.uk
campaigns.imperial.ac.uk
webact.org
remotehelp.ic.ac.uk
www.inform.imperial.ac.uk
icis.imperial.ac.uk
webact.org
spam.ic.ac.uk
google.imperial.ac.uk
estore.imperial.ac.uk
ucu.imperial.ac.uk
fseuc-2.freshservice.com
www3.imperial.ac.uk
www1.imperial.ac.uk
jetpac.app
icseclzt.cc.ic.ac.uk
ictprintservice-mobile.imperial.ac.uk
wwwtest.imperial.ac.uk
www1.imperial.ac.uk
appstream.ic.ac.uk
ib-programmes.imperial.ac.uk
ictprintservice-www-dev.cc.imperial.ac.uk
fseuc-2.freshservice.com
fileexchange.imperial.ac.uk
ict-printservice-www.cc.imperial.ac.uk
google.imperial.ac.uk

Certificate

The complete raw certificate details for cran.ma.imperial.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E1fxFV45rwCWqDjianz
yX4lZxCx0hSF6Owfay9I9Vcj3ul2l23YvsXOnIZvKySUh1sGiV92giKiHRrJuxVZ
YkL3/JOx3L8hDPLyNnvd57n/QNvrK1gj4gZ/ulOCXXWdhsOnMb1+5QA6DF/Xfn78
bK7kqUDOmzo4q9gC1fG5HUJZMSq1r+tVRL/fp+BBwDM4EVkc0ZXvztL6uEmJzHjN
Y/d6E00fT1xvE1y/zM0vBo7obgixpGGj3jBE5ilKWKfbdcYrP9Af3qbfVSdrKwNA
Ubd3rxaMuUPjLaJE5rgLAeqiKKMSCL1xNza8tbb20o1Ua0AevYcXKve8b5GQUDNU
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 209397513041152272106899041456659623553
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London, City of'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Imperial College of Science, Technology and Medicine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cran.ma.imperial.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26800675238410894335859489109675023511768705974244588252425656403278852748736154301114810451989161405501950007741256995047687686046140166093155385696727484917002597786507096000582650237340049474712851174350843509761782886702242495939763711217790792598658150473771774368429497971819568198477211281030606741981896614789781631933229866874272218090915558833889289628824802639901111412631107321877632603293105770444223645582093295226525756320579772459708854069077772243914862986383607877254284114650242091190147978774099470154846723162284795074676697696706793040454149717237615875055200950243780365999163843302521163699239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa1a0990e53dfcae25f03edc4c155f27c688d036
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cran.ma.imperial.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cran.ma.imperial.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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