onlinestore.leedsbeckett.ac.uk

- Leeds Metropolitan University -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 74:33:6c:9c:41:f8:e8:3f:6d:86:7d:bc:bb:7f:30:d7 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Leeds Metropolitan University

Organization: Leeds Metropolitan University
Organization unit: Admin
State / Province: Leeds
Locality: Leeds
Country: GB

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 74:33:6c:9c:41:f8:e8:3f:6d:86:7d:bc:bb:7f:30:d7
Serial Number (int): 154457457531083500072252018751700938967
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 24:9d:39:ca:b8:f3:61:13:89:4e:64:cf:49:ac:8e:a3:ec:c7:33:57
Fingerprint (sha256): 0c:23:40:0a:77:7f:d4:ac:53:ee:bf:58:11:52:1e:16:f9:3d:03:8f:09:08:1d:c8:41:b5:ed:86:8a:02:c2:17

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate onlinestore.leedsbeckett.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for onlinestore.leedsbeckett.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

onlinestore.leedsbeckett.ac.uk

Other certificates including the domain name leedsbeckett.ac.uk

(limited to 100 certificates)
myhub.leedsbeckett.ac.uk
surveys.leedsbeckett.ac.uk
vpn-sta.leedsbeckett.ac.uk
www.studygroup.com
my.leedsbeckett.ac.uk
aet-ovirt.aet.leedsbeckett.ac.uk
www.studygroup.com
xap.leedsbeckett.ac.uk
fms.leedsbeckett.ac.uk
my-staging.leedsbeckett.ac.uk
libanswers.leedsbeckett.ac.uk
libanswers.leedsbeckett.ac.uk
vts.leedsbeckett.ac.uk
webdrive.aet.leedsbeckett.ac.uk
oala-dev.leedsbeckett.ac.uk
www.studygroup.com
onlinestore.leedsbeckett.ac.uk
eu-central-1-san1.blackboard.com
my-dev.leedsbeckett.ac.uk
*.leedsbeckett.ac.uk
www.studygroup.com
myhub.leedsbeckett.ac.uk
lbmail.leedsbeckett.ac.uk
libguides.leedsbeckett.ac.uk
www.studygroup.com
catalogue-dev.leedsbeckett.ac.uk
vhd.leedsmet.ac.uk
www.leedsbeckett.ac.uk
www.studygroup.com
eu-central-1-san1.blackboard.com
symplectic-web.leedsbeckett.ac.uk
i-print.leedsbeckett.ac.uk
libguides.leedsbeckett.ac.uk
sspr.leedsbeckett.ac.uk
www.studygroup.com
libanswers.leedsbeckett.ac.uk
libanswers.leedsbeckett.ac.uk
libcal.leedsbeckett.ac.uk
onlinestore.leedsbeckett.ac.uk
libcal.leedsbeckett.ac.uk
libguides.leedsbeckett.ac.uk
eu-central-1-san1.blackboard.com
vts.leedsbeckett.ac.uk
libguides.leedsbeckett.ac.uk
cc-lywebext.leedsbeckett.ac.uk
www.aet.leedsbeckett.ac.uk
workpro.leedsbeckett.ac.uk
archives.leedsbeckett.ac.uk
payments.leedsbeckett.ac.uk
exc-mailbox2.leedsbeckett.ac.uk
eprints.leedsbeckett.ac.uk
webfiles.leedsbeckett.ac.uk
my.leedsbeckett.ac.uk
webresources.leedsbeckett.ac.uk
exc-mailbox1.leedsbeckett.ac.uk
*.leedsbeckett.ac.uk
welcome.leedsbeckett.ac.uk
i-print.leedsbeckett.ac.uk
skyline.leedsbeckett.ac.uk
vacancies.leedsbeckett.ac.uk
eduroam.leedsbeckett.ac.uk
www.studygroup.com
libguides.leedsbeckett.ac.uk
eu-central-1-san1.blackboard.com
eu-central-1-san1.blackboard.com
peopledevelopment.leedsbeckett.ac.uk
www.studygroup.com
replay.leedsbeckett.ac.uk
library-rfid.leedsbeckett.ac.uk
zendto.leedsbeckett.ac.uk
libanswers.leedsbeckett.ac.uk
zendto.leedsbeckett.ac.uk
sspr.leedsbeckett.ac.uk
www.wellmetshortstay.com
exc-mailbox3.leedsbeckett.ac.uk
registration.leedsbeckett.ac.uk
onlinestore.leedsbeckett.ac.uk
www.studygroup.com
*.ezproxy.leedsbeckett.ac.uk
www.studygroup.com
applyonline.leedsbeckett.ac.uk
cc-lysbc02.leedsbeckett.ac.uk
replay.leedsbeckett.ac.uk
nfsbookings.aet.leedsbeckett.ac.uk
libguides.leedsbeckett.ac.uk
registration.leedsbeckett.ac.uk
libcal.leedsbeckett.ac.uk
myhub.leedsbeckett.ac.uk
libguides.leedsbeckett.ac.uk
campusm.dev.leedsbeckett.ac.uk
e-pay.leedsbeckett.ac.uk
*.leedsbeckett.ac.uk
www-dev.practicelearn.co.uk
eu-central-1-san1.blackboard.com
exc-mailbox4.leedsbeckett.ac.uk
libcal.leedsbeckett.ac.uk
skyline.leedsbeckett.ac.uk
www.studygroup.com
eu-central-1-san1.blackboard.com
www.studygroup.com

Certificate

The complete raw certificate details for onlinestore.leedsbeckett.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZIQoo3gcGBVDoovw6cA
3v86G2X11OJQgac9NhGfvXfZJnDR+ZfNqDHk+6JXyTBwWXzINXWXcdmBGhL4GVRt
2zLK4ybROsGZNFcQj3fWTca7wd+9e+ptLtUxW5coumfZESd4LLhxgqy5hTgvC07f
/7Z0rYIe8tt8cG5LM6OsT7PVUF7XOReMSb8bayuy83pJIM5zcICHyBBOkmwRx5kQ
G82AeA3hEF8r2qM+ETlo+lbs1rU8zhpRpKK8RwW5gz5ItdsO9FYzpRHN5QiJAj8H
cOj9KjZP4ND7xzAhCPexrKlmESn/lHbAJ5rfPtsjQD916qs0Y4spC5Uy9qHYWCt3
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 154457457531083500072252018751700938967
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Leeds'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Leeds'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Leeds Metropolitan University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Admin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'onlinestore.leedsbeckett.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30495458823140888290571614396172272982164506194284941993340583033484882835937105055244057134415508276969768947004608292880215202729930644499956142703855110447232428575462219094050279990992143996317135059017050066943915092586820659431057047860711546791029237603667174509951902092212898956927217293524804779022294251939487411742103462817261496645567114297275430881671149902949413631781770989845837423840884641966375037610586179315822565389375720143987028846579619564487200070414684243696151968343412458946955122375231195766942161317391727431044063193077177786867144112619813586749306805405198891409558983032994163029837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinestore.leedsbeckett.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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