xap.leedsmet.ac.uk

Issued by TERENA SSL CA

About this certificate

This digital certificate with serial number 22:53:dd:fe:8e:c5:46:8b:af:2e:35:8f:1c:38:1a:2a was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=xap.leedsmet.ac.uk,OU=Domain Control Validated

TERENA

Organization: TERENA
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 22:53:dd:fe:8e:c5:46:8b:af:2e:35:8f:1c:38:1a:2a
Serial Number (int): 45629215076606578937672306869019351594
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 0b:5e:a1:9a:a5:02:94:c7:dc:31:37:54:78:88:0a:9b:34:d1:9b:a4
AuthorityKeyId: 0c:bd:93:68:0c:f3:de:ab:a3:49:6b:2b:37:57:47:ea:90:e3:b9:ed

Fingerprint (sha1): 45:89:7b:80:83:2f:da:d8:69:4e:7f:cb:f2:ba:4e:7a:96:ea:41:83
Fingerprint (sha256): 0d:ae:19:38:c0:5a:4c:93:c5:59:0b:a8:44:b9:20:c8:b5:67:74:77:fc:f1:91:66:f8:0a:ec:c5:1d:34:6d:be

Issuing Certificate URL: http://crt.tcs.terena.org/TERENASSLCA.crt

Revocation information

OCSP Server: http://ocsp.tcs.terena.org
CRL Distribution Point: http://crl.tcs.terena.org/TERENASSLCA.crl

Check the revocation status for certificate xap.leedsmet.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xap.leedsmet.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xap.leedsmet.ac.uk

Other certificates including the domain name leedsmet.ac.uk

(limited to 100 certificates)
welcome.leedsmet.ac.uk
fms.leedsmet.ac.uk
vpn-sta.leedsbeckett.ac.uk
researchethics.leedsmet.ac.uk
onlinestore.leedsmet.ac.uk
*.experience.leedsmet.ac.uk
piph.leedsmet.ac.uk
xap.leedsbeckett.ac.uk
fms.leedsbeckett.ac.uk
*.leedsmet.ac.uk
my-dev.leedsbeckett.ac.uk
xap.leedsmet.ac.uk
webresources.leedsmet.ac.uk
vhd.leedsmet.ac.uk
www.leedsbeckett.ac.uk
i-print.leedsbeckett.ac.uk
netstorage.leedsmet.ac.uk
registration.leedsmet.ac.uk
pams.leedsmet.ac.uk
vts.leedsbeckett.ac.uk
uniquetopup.leedsmet.ac.uk
owa2k3.leedsmet.ac.uk
researchonline.leedsmet.ac.uk
onlinestore.leedsmet.ac.uk
aua.leedsmet.ac.uk
webfiles.leedsbeckett.ac.uk
confirmation.leedsmet.ac.uk
my.leedsbeckett.ac.uk
i-print.leedsmet.ac.uk
onlinestore.leedsmet.ac.uk
webresources.leedsbeckett.ac.uk
welcome.leedsbeckett.ac.uk
i-print.leedsbeckett.ac.uk
vacancies.leedsbeckett.ac.uk
peopledevelopment.leedsbeckett.ac.uk
*.ezproxy.leedsmet.ac.uk
replay.leedsbeckett.ac.uk
library-rfid.leedsbeckett.ac.uk
webfiles.leedsmet.ac.uk
experience.leedsmet.ac.uk
www.wellmetshortstay.com
registration.leedsbeckett.ac.uk
applyonline.leedsmet.ac.uk
www.leedsmet.ac.uk
uniquetopup.leedsmet.ac.uk
applyonline.leedsbeckett.ac.uk
owa2k3.leedsmet.ac.uk
replay.leedsbeckett.ac.uk
owa2k3.leedsmet.ac.uk
applyonline.leedsmet.ac.uk
itbm-web1.leedsmet.ac.uk
www-train.practicelearn.co.uk
registration.leedsbeckett.ac.uk
e-pay.leedsbeckett.ac.uk
enterpriseacademy.leedsmet.ac.uk
www.leedsmet.ac.uk
www.wellmetshortstay.com
luminis.leedsmet.ac.uk
accommodation.leedsmet.ac.uk
experience.leedsmet.ac.uk
piph.leedsmet.ac.uk
citrix-store.leedsbeckett.ac.uk
repository.leedsmet.ac.uk
userid.leedsmet.ac.uk
datacap.leedsmet.ac.uk
jobsonline.leedsmet.ac.uk
www.leedsmet.ac.uk
www.practicelearn.co.uk
resultsonline.leedsmet.ac.uk
owa2k3.leedsmet.ac.uk
resultsonline.leedsbeckett.ac.uk
selfservice.leedsbeckett.ac.uk
selfservice.leedsbeckett.ac.uk
userid.leedsmet.ac.uk
apps.leedsmet.ac.uk
nagios-prod.leedsmet.ac.uk
apps.leedsmet.ac.uk
my.leedsmet.ac.uk
my.leedsbeckett.ac.uk
apps.leedsbeckett.ac.uk
vpn-stu.leedsmet.ac.uk
pm.leedsbeckett.ac.uk
placementsonline.leedsmet.ac.uk
enterpriseacademy.leedsbeckett.ac.uk
www-dev.practicelearn.co.uk
pm.leedsmet.ac.uk
xap.leedsmet.ac.uk
plus.leedsmet.ac.uk
placementsonline.leedsbeckett.ac.uk
lmu-agrwebpay.leedsmet.ac.uk
hy-rmapp1.leedsmet.ac.uk
ezproxy.leedsmet.ac.uk
uniquetopup.leedsbeckett.ac.uk
replay.leedsmet.ac.uk
payments.leedsmet.ac.uk
meti.leedsbeckett.ac.uk
webfiles.leedsbeckett.ac.uk
onlinestore.leedsmet.ac.uk
ovp.leedsbeckett.ac.uk
owa2k7.leedsmet.ac.uk

Certificate

The complete raw certificate details for xap.leedsmet.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+qsjSCqDxumR4+vbj1j
EbSNHLmKSt9QFMTLXNk57VCvc0UWkcR2zjuStmXkgtHHibjR8Ce0CY4Fz73Uj/0X
I+59G4dIb8kZBb8VG4iUXH2yLdrGA9Ic8HGJlb/CIbHoVk3bTj6ohTLVXKoL/jm9
kdD7fAZ3Ze1+TLZT9MMyZKO7RWKTeuEZ6wFuA5mqskMfxlQznJuwbQ3gIL27nqrc
F0Dabvsk33PPjxzGvN2t9S3/9V71DH1jgdwu5OktBNpWpOEOwu1zXPq42jsxTpQA
pNeLlrv45GydmgZOCgCqfStgOVFM/C675OnB90LInqPL8M1utyRDJbM7yiDg9h5k
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 45629215076606578937672306869019351594
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xap.leedsmet.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24227238324959941794475153180353441507769942179628714349244342159638837329338444041930857676854519549907950163024549860223602266714120102444394518853927486323357324067048864565227967434344228578996109198574540692698676336222095700671548720833265955915431056661537373524880037868900333866967458903198117393880495305024727051516690015385531902966133680517870314188806835104581159236847775399480445144397664195444346236295877275558993556902739958641070613192459720380664214472165142974658288726160961026031433389315127339438496068419349740834317886180114077497181983475687541335999129071400488523745484233259705830368447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cbd93680cf3deaba3496b2b375747ea90e3b9ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b5ea19aa50294c7dc31375478880a9b34d19ba4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.tcs.terena.org/TERENASSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.tcs.terena.org/TERENASSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tcs.terena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xap.leedsmet.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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