globalprotect2.soton.ac.uk

- University of Southampton -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 48:99:47:18:33:58:9c:b1:26:ff:da:c1:50:08:2a:e5:c9:3c:24:1d was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Southampton

Organization: University of Southampton
Organization unit: iSolutions
State / Province: Hampshire
Locality: SOUTHAMPTON
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 48:99:47:18:33:58:9c:b1:26:ff:da:c1:50:08:2a:e5:c9:3c:24:1d
Serial Number (int): 414465542722020320165410806048898411698795062301
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: d5:24:2f:0b:51:07:b4:15:9b:96:ee:10:fe:c4:d8:c0:55:22:89:cf
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 15:31:1b:ed:50:8b:61:26:ca:79:c0:6d:cd:33:45:7b:a7:fe:24:fd
Fingerprint (sha256): 11:7c:26:c6:fe:ce:01:60:12:00:7a:14:7e:f6:c5:2c:9c:b5:c6:b7:ef:79:b8:39:a1:be:64:03:bc:3f:68:55

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate globalprotect2.soton.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for globalprotect2.soton.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

globalprotect2.soton.ac.uk

Other certificates including the domain name soton.ac.uk

(limited to 100 certificates)
outlookanywhere.exchange.devdomain.soton.ac.uk
survey.caa.soton.ac.uk
*.lifeguidewebsites.org
southampton.ac.uk
edshare.soton.ac.uk
status.dev.soton.ac.uk
cima.ecs.soton.ac.uk
www.edshare.soton.ac.uk
personal.soton.ac.uk
oesnet.noc.soton.ac.uk
www.assignments.soton.ac.uk
thz.soton.ac.uk
cco.geodata.soton.ac.uk
blogs.chem.soton.ac.uk
imap.ecs.soton.ac.uk
www.lifeguideonline.org
wegov.it-innovation.soton.ac.uk
www.adminservices.soton.ac.uk
www.feeintranet.soton.ac.uk
landss.soton.ac.uk
deepcholesterol.soton.ac.uk
go.soton.ac.uk
external.sharepoint.soton.ac.uk
game.ecs.soton.ac.uk
vesselnoise.soton.ac.uk
coursecast.soton.ac.uk
www.taster.ecs.soton.ac.uk
inteumweb.soton.ac.uk
corporate.wordpress.soton.ac.uk
teachingaccessibility.soton.ac.uk
moodle.ecs.soton.ac.uk
connect.devdomain.soton.ac.uk
srv01816.soton.ac.uk
www.cite.soton.ac.uk
smtp.soton.ac.uk
devecs.ecs.soton.ac.uk
edshare.soton.ac.uk
www.outlook.devdomain.soton.ac.uk
*.robpress.ecs.soton.ac.uk
pre-prod.jobs.soton.ac.uk
synote.soton.ac.uk
examtimetable.soton.ac.uk
www.payments.soton.ac.uk
www.idcard.soton.ac.uk
elanguages.soton.ac.uk
sharepoint.soton.ac.uk
fwa.soton.ac.uk
modulereportdev.soton.ac.uk
env.ecs.soton.ac.uk
www.wumtia.soton.ac.uk
placements.soton.ac.uk
qtt.phys.soton.ac.uk
qlikview.soton.ac.uk
pure.soton.ac.uk
cima.ecs.soton.ac.uk
www.it-innovation.soton.ac.uk
extreg.soton.ac.uk
www.onlinema.soton.ac.uk
baxendale.gofit.soton.ac.uk
doxygen.mountainsensing.org
sourcekettle.ecs.soton.ac.uk
www.outlook.soton.ac.uk
forge.ecs.soton.ac.uk
doxygen.mountainsensing.org
autodiscover.soton.ac.uk
www.shared.soton.ac.uk
www.payments.soton.ac.uk
webmail.soton.ac.uk
data.southampton.ac.uk
cima.ecs.soton.ac.uk
arm.ecs.soton.ac.uk
async.exchange.devdomain.soton.ac.uk
studyoverseas.soton.ac.uk
devecs.ecs.soton.ac.uk
*.it-innovation.soton.ac.uk
wendy.ecs.soton.ac.uk
jobs.soton.ac.uk
ise-psn3.netauth.soton.ac.uk
www.techsup.ecs.soton.ac.uk
cima.ecs.soton.ac.uk
srv00585.soton.ac.uk
www.som.soton.ac.uk
my2.pprd.soton.ac.uk
marc.ecs.soton.ac.uk
payrolldata.soton.ac.uk
iarss.soton.ac.uk
provenance.ecs.soton.ac.uk
humanitiesresearch.soton.ac.uk
planon.soton.ac.uk
logon.pprd.soton.ac.uk
orcid.soton.ac.uk
www.gradbook.soton.ac.uk
repec.soton.ac.uk
jenkins.ecs.soton.ac.uk
www.archives.soton.ac.uk
fshms-gradschool.southampton.ac.uk
nischr.soton.ac.uk
doxygen.mountainsensing.org
*.ext.soton.ac.uk
tryjoommf.soton.ac.uk

Certificate

The complete raw certificate details for globalprotect2.soton.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414465542722020320165410806048898411698795062301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 13:25:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-29 13:35:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SOUTHAMPTON'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Southampton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'iSolutions'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'globalprotect2.soton.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816095075431960706860915565076797863720088357145172504749464160419267330389643731901603784518510317083709206814330412856045704528265224575288395047307249639351463176445012550017857598727862075157617597807336030978056670588502052423811638733129209100408845394017024918564439866971082658507696811019696947552720635228397468166596776842996577494029550067994244018268506787189952824892938436651154583027975887401365829963230406821721480752133228213175388116576476251915308571147048569869608673843199964192047108399209033337196498758999684128220826049675681456497238626726014244605437901581782192692728949228806013204978314418015220341589554870090375831255830346073595469248035066399988636068850174194906229592280208155279925083077908209367206374733528172464943268758783244683181095703606134418959673071027725557260310610027429647981542429903503716547481916952507760112839510479641899414399715613048987931230310136379853679078671853579639181261847214575789006367310942008630789075515219345505401850130167337985226729926264958791205871065317184847057458749524166733756940244501333150742706352781341363764123357492109880228274774968569738575528260801026072268272239584748448157656708053675494501679946599683268986405637980204877711338892523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalprotect2.soton.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5242f0b5107b4159b96ee10fec4d8c0552289cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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