www4.ntu.ac.uk

- Nottingham Trent University -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 23:b7:2e:b6:6d:53:5b:0d:42:9d:10:b7:31:55:fe:23 was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Nottingham Trent University

Organization: Nottingham Trent University
State / Province: Nottinghamshire
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 23:b7:2e:b6:6d:53:5b:0d:42:9d:10:b7:31:55:fe:23
Serial Number (int): 47474117621785911474115523501897416227
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: ce:8f:08:2f:ab:be:76:6b:db:2a:f4:2d:7e:dd:5a:1e:4b:ca:98:52
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): af:e7:a2:c2:64:62:e7:13:0f:a2:f9:4b:af:1c:62:aa:aa:34:81:31
Fingerprint (sha256): 15:c4:02:21:f3:a9:a3:56:ba:bb:74:4b:01:34:c0:42:4a:50:cb:b8:eb:f0:0b:2c:5d:4e:fe:14:ab:e8:bd:be

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www4.ntu.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www4.ntu.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www4.ntu.ac.uk

Other certificates including the domain name ntu.ac.uk

(limited to 100 certificates)
dev-in-place.ntu.ac.uk
support.ntu.ac.uk
www.nlscitrix.ntu.ac.uk
Easyprint.ntu.ac.uk
shibidp.ntu.ac.uk
owa.exrestore.ntu.ac.uk
possibilities.ntu.ac.uk
testidp1.ntu.ac.uk
ntuanywhere.ntu.ac.uk
sip.exrestore.ntu.ac.uk
vacancies.ntu.ac.uk
vacancies.ntu.ac.uk
www.ntu.ac.uk
online.ntu.ac.uk
support.ntu.ac.uk
opac.ntu.ac.uk
cty-fe-pool-ext.ntu.ac.uk
train-in-place.ntu.ac.uk
5754435435233280-fe4.pantheonsite.io
staffpassword.ntu.ac.uk
driscoll.ntu.ac.uk
opac.ntu.ac.uk
selfservice.ntu.ac.uk
ntuanywhere.ntu.ac.uk
brackenhurst.elearn.ntu.ac.uk
smartcard.ntu.ac.uk
city-fe-pool-ext.exrestore.ntu.ac.uk
www2.ntu.ac.uk
wireless.ntu.ac.uk
elearn.ntu.ac.uk
outlook.su.ntu.ac.uk
online.ntu.ac.uk
office365.ntu.ac.uk
www2.ntu.ac.uk
ntusecurity.ntu.ac.uk
opac.ntu.ac.uk
testidp1.ntu.ac.uk
wireless.ntu.ac.uk
online.ntu.ac.uk
vacancies.ntu.ac.uk
landing.online.ntu.ac.uk
www.onlinepayments.ntu.ac.uk
strenton.com
elearn.ntu.ac.uk
lawquiz.ntu.ac.uk
in-place.ntu.ac.uk
www4.ntu.ac.uk
shibsp.ntu.ac.uk
socscibookings.ntu.ac.uk
www.nlsportal.ntu.ac.uk
sportbooking.ntu.ac.uk
warren.ntu.ac.uk
selfservice.ntu.ac.uk
support.ntu.ac.uk
owa.exrestore.ntu.ac.uk
brackenhurst.elearn.ntu.ac.uk
journals.ntu.ac.uk
siso.ntu.ac.uk
mypeople.ntu.ac.uk
vacancies.ntu.ac.uk
cas.ntu.ac.uk
owa.exrestore.ntu.ac.uk
gandalf.ads.ntu.ac.uk
online.ntu.ac.uk
possibilities.ntu.ac.uk
warren.ntu.ac.uk
curriculumrefresh.ntu.ac.uk
wake.ntu.ac.uk
www.onlinepayments.ntu.ac.uk
landing.online.ntu.ac.uk
wireless.ntu.ac.uk
krebs.ntu.ac.uk
mimas.ntu.ac.uk
thomasmore.ads.ntu.ac.uk
shib2idp.ntu.ac.uk
onlinestore.ntu.ac.uk
estates.ntu.ac.uk
strenton.com
ntusecurity.ntu.ac.uk
sip.ntu.ac.uk
socscibookings.ntu.ac.uk
lawquiz.ntu.ac.uk
myidentity.ntu.ac.uk
olympuss.ntu.ac.uk
www.ntu.ac.uk
video.ntu.ac.uk
wake.ntu.ac.uk
landing.online.ntu.ac.uk
staffpass.ntu.ac.uk
onlinestore.ntu.ac.uk
sip.exrestore.ntu.ac.uk
benga.ntu.ac.uk
ntu-interactions.ads.ntu.ac.uk
smartcard.ntu.ac.uk
artstore.ntu.ac.uk
office365.ntu.ac.uk
benga.ntu.ac.uk
testidp1v3.ntu.ac.uk
Beorn.ads.ntu.ac.uk
sip1.exrestore.ntu.ac.uk

Certificate

The complete raw certificate details for www4.ntu.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscYurZ3VLlC36yAGhh6c
TyC0l8ftUoS6T5RhA8OIMPA0hPSmUsG1G8fvJnzrU8Y8EfGKUiLYppcnfHfJWZ5d
PSo0HiOXcDm5tvD/KLbMpjwK2ltEg8UcnIvIWNmgww5FXmS4F5hppaUTw9M+gv9s
uFUSvAHN+iJwKIqqgyVjpmKyFZ2pnzWZAMKXItTMIngWYLwJAQdYNI0lZH/otcQE
9Uks+/Qbzs25PAVqSOUpb+L+ovDCJtKYF0OG1sShDItWL5pv9J9V0+pLSH4N0Z5R
+Paf3oENpaNwxzJ0MSm1U79HXHiuwOwbZnpJTd5BzsZAadQwdiLXCFhKNiNSi7mG
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 47474117621785911474115523501897416227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nottinghamshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nottingham Trent University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www4.ntu.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22441907331556643993547302576490404601852705467709694289350322175629500009491879065349288303968705747195576748145190197083409212985733542845990473786998459315127257600622860966399773518239941370661541352193255468062459699993919397038319767074242329672760708037566524261195165766132480201667383869078415116842334081454460769955798450211912712127692282696013953963256870643602314171759523897262311584668477083717783701067693676297211249165261343435297827011243379696583164823932691901610405253500954179559074558189478755180399437109252579138672710418978017399776332952322875029680080707303355387721406239577601734182589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce8f082fabbe766bdb2af42d7edd5a1e4bca9852
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018799b5ac2d0000040300483046022100d037f6f830ae310bb508c61206e022e82404e4a8900ab94ad917182319fd87c1022100a9964d0035924ca1be37b9d151ef35a41a98e8a1c82d9100dbf6eecdef16c045007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018799b5ac900000040300473045022079ccc5aa190eba4b165107ed1528bd05dc4de98a758407e8b457594716a034ec02210086a9773de76f04eb60f2dde748e15e0a4f65928817d1b895d504fe9bbca1690e007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018799b5aca700000403004630440220067327b4513a5ba9678ec01ef8553a1d18ab80d3847ef4f7b5635a68bedf64a0022047f46850e485fdd99f126fb8860227b470bc1eb2320fb3da4d030b489e5a8f68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www4.ntu.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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