journals.staffs.ac.uk

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 04:ff:8e:87:dd:70:fb:5d:60:f1:ce:fb:25:39:a7:78 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=journals.staffs.ac.uk

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ff:8e:87:dd:70:fb:5d:60:f1:ce:fb:25:39:a7:78
Serial Number (int): 6643838548564476398610370309954054008
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 30:14:52:a2:e6:3f:2e:8e:c6:d7:c3:8c:7b:f7:3c:28:13:83:22:a4
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): a0:50:2b:6c:32:e7:d4:b4:44:17:f5:1f:43:3c:2d:0a:fa:4b:d5:50
Fingerprint (sha256): 0e:ae:51:ab:2d:32:0d:61:4b:4f:2b:5a:37:ad:71:58:1b:b6:af:c8:fd:33:2b:63:90:8f:15:f1:6d:f0:51:e4

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate journals.staffs.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for journals.staffs.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

journals.staffs.ac.uk

Other certificates including the domain name staffs.ac.uk

(limited to 100 certificates)
paymentportal.staffs.ac.uk
staffsurvey.staffs.ac.uk
shop.staffs.ac.uk
accesscentre.staffs.ac.uk
www-int.staffs.ac.uk
libguides.staffs.ac.uk
surf.staffs.ac.uk
evision.staffs.ac.uk
ingenius.staffs.ac.uk
jira.games.staffs.ac.uk
reslifeportal.staffs.ac.uk
vpn.staffs.ac.uk
blackboard.staffs.ac.uk
gamestech.staffs.ac.uk
gamestech.staffs.ac.uk
eprints.staffs.ac.uk
iris.staffs.ac.uk
i3.staffs.ac.uk
myportal.staffs.ac.uk
allstokedup.staffs.ac.uk
airnet-secure.staffs.ac.uk
learning.staffs.ac.uk
vmp1wscan1.staff.staffs.ac.uk
www-int.staffs.ac.uk
crusweb3.staffs.ac.uk
blackboard.staffs.ac.uk
crusweb3.staffs.ac.uk
sspr.staffs.ac.uk
sid-uat.staffs.ac.uk
libcat.staffs.ac.uk
workvivo.staffs.ac.uk
digitalacademy.staffs.ac.uk
journals.staffs.ac.uk
staffs.ac.uk
iswiki.staffs.ac.uk
govdocs.staffs.ac.uk
beacon.staffs.ac.uk
staffs.ac.uk
unicard.staffs.ac.uk
eu-central-1-san1.blackboard.com
evision.staffs.ac.uk
*.staffs.ac.uk
coll-publisher-ms.staffs.ac.uk
crusmis14.staffs.ac.uk
vmp1wstuweb1.staff.staffs.ac.uk
staffdirectory.staffs.ac.uk
crwnfcet2.staffs.ac.uk
medialibrary.staffs.ac.uk
bitlocker.staffs.ac.uk
san-eu02-gd.hosted.exlibrisgroup.com
eu-central-1-san1.blackboard.com
alumni.staffs.ac.uk
search.staffs.ac.uk
unicard.staffs.ac.uk
crusldi6.staffs.ac.uk
dilondon2.staffs.ac.uk
adfs.staffs.ac.uk
wwwtest.staffs.ac.uk
VMT1UCAMPUSM1.staffs.ac.uk
*.staffs.ac.uk
crusetran4.staffs.ac.uk
cruscmc2.staffs.ac.uk
coll-cucm-imp-ms.staffs.ac.uk
workvivo.staffs.ac.uk
crwnident1.staffs.ac.uk
staffs.ac.uk
blackboard.staffs.ac.uk
images.staffs.ac.uk
crwncas1.staffs.ac.uk
libcat.staffs.ac.uk
grafana.staffs.ac.uk
staffs.ac.uk
crwnethot1.staffs.ac.uk
timetables.staffs.ac.uk
myview-test.staffs.ac.uk
rodc.staffs.ac.uk
cruscampus2.staffs.ac.uk
askus.staffs.ac.uk
myview.staffs.ac.uk
inplace-test.staffs.ac.uk
allstokedup.staffs.ac.uk
myportal.staffs.ac.uk
eu-central-1-san1.blackboard.com
vpn.staffs.ac.uk
www.staffs.ac.uk
adfs.staffs.ac.uk
*.staffs.ac.uk
search.staffs.ac.uk
coll-socialminer.staffs.ac.uk
*.ezproxy.staffs.ac.uk
staffs.ac.uk
blackboard.staffs.ac.uk
hotspot.staffs.ac.uk
staffdirectory.staffs.ac.uk
*.staffs.ac.uk
syllabus-test.staffs.ac.uk
adfs.staffs.ac.uk
accesscentre.staffs.ac.uk
shop.staffs.ac.uk
affiliates.staffs.ac.uk

Certificate

The complete raw certificate details for journals.staffs.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN7s0U/q6yQBQYy/Rj3u
11HE/YRJJDIZfihOVQSotAm4FKs8EBoI7tsYQlCvfX0GkdpbQqipQ4Df1TMCv6cR
M6kq56dgapAOn6/HjPDAti9klxTmDV62C8mwLjlliB/kbpyRNPgZjX2WeaBqRq05
7+/m1qt/m6V7UgNyPVHN+bl5paccPZxxXcZOh09PmbZt2BLKYV1cfNGN9WXeLgnf
aIO8Z9wsV/j26jmVgY8zwZXrBhRIhS8Klghhhx+PKs+lQ1LWVk9u1AhJEooLM/Ay
b/9dX83q1Rtg2/SiRqRdt1X+MXlzVqLE6KtJb+qb44vZ9Ydbbb9qn9NPCvgz/F7K
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6643838548564476398610370309954054008
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'journals.staffs.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18793197583516182096116999442837200151931117777815694386042305451668593459021907115037459790535734127627248099101268166216806524626963092289232549055078158876695922011315479363222324836726722358073861855603389126931102715200650055686719465732416226498240492640101634393460780468913983472814929772731080950582767272558147835736344626792009777441989846586862984030089272377055858685571472984277101453771638209645375717055437685721894643813218892078762353816127167807847332187230470884447888237619055728113612788342403433125529397312824941946091787176726777285427488724329795247782740187838402052241176987580406943369917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							301452a2e63f2e8ec6d7c38c7bf73c28138322a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journals.staffs.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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