www.ole.bris.ac.uk

- University of Bristol -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 25:04:0a:0d:20:29:00:ed:f6:b5:54:e7:ad:6a:04:b2 was issued on by GEANT Vereniging.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

University of Bristol

Organization: University of Bristol
State / Province: Bristol, City of
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 25:04:0a:0d:20:29:00:ed:f6:b5:54:e7:ad:6a:04:b2
Serial Number (int): 49202408895491266472638407326932010162
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 5a:ad:06:15:8c:0b:77:fe:1b:94:3d:2e:6e:7b:d1:5b:9b:bc:db:f9
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 6c:d8:82:60:ba:61:02:f0:fe:1c:02:b9:62:fb:ac:75:55:cb:05:1f
Fingerprint (sha256): 16:b2:a1:42:c2:e7:8f:51:36:eb:e3:e3:b1:b1:ef:25:cc:f3:71:9d:c2:01:da:6a:36:1b:0a:97:6c:eb:c1:18

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.ole.bris.ac.uk

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ole.bris.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ole.bris.ac.uk
ole.bris.ac.uk
ole.bristol.ac.uk
www.ole.bristol.ac.uk

Other certificates including the domain name bris.ac.uk

(limited to 100 certificates)
smtp-auth.bris.ac.uk
ilrt.static.rit.bris.ac.uk
myerp-archive-test.bris.ac.uk
wwwa-dev.fen.bris.ac.uk
wikisdev.bris.ac.uk
amis.bris.ac.uk
netmon.netcomms.bristol.ac.uk
estates.bris.ac.uk
DVAtraining.bristol.ac.uk
evision.apps.bristol.ac.uk
www.alumni.bris.ac.uk
naturelocator.ilrt.bris.ac.uk
crump.chm.bris.ac.uk
pwr.isys.bris.ac.uk
git.acrc.bris.ac.uk
evision.apps.bris.ac.uk
fitnetnhs.bristol.ac.uk
aerosol-cdt.ac.uk
galaxy-gio.acrc.bristol.ac.uk
socmed.ilrt.bris.ac.uk
www.medici.bris.ac.uk
www.alspac.bristol.ac.uk
ipadcrm.ilrt.bris.ac.uk
research-information.bris.ac.uk
IT038881.soms.bris.ac.uk
source.ggy.bris.ac.uk
status.resnet.bris.ac.uk
www.edes.bris.ac.uk
mailer.cs.bris.ac.uk
evision-b.apps.bristol.ac.uk
brainbanknetwork.cse.bris.ac.uk
proposals.epi.bris.ac.uk
datascience.bris.ac.uk
data.bristol.ac.uk
shop.bris.ac.uk
datacentertools.bris.ac.uk
www.survey.bris.ac.uk
xerte.bris.ac.uk
laharflow.bris.ac.uk
www.gradconnection.bristol.ac.uk
mwgit.bris.ac.uk
its-da-nls.cse.bris.ac.uk
dedefi.ilrt.bris.ac.uk
irisplus.bris.ac.uk
fluff.bris.ac.uk
www.apps.bris.ac.uk
moodle.bris.ac.uk
myerp-archive-test.bris.ac.uk
research-information.bris.ac.uk
interdelphi.rit.bristol.ac.uk
app-dc2-cirx-p0-vip.services.bris.ac.uk
wwwcoredev.bris.ac.uk
t4cms-dev.bris.ac.uk
wwwrep.ole.bris.ac.uk
ci.ilrt.bristol.ac.uk
online-payments.bris.ac.uk
people.maths.bris.ac.uk
chocolate.wireless.bris.ac.uk
wwwtestdev-ole.bris.ac.uk
oas.apps.bristol.ac.uk
shop.bris.ac.uk
globalbeershop.spe.cs.bris.ac.uk
www.alumni.bris.ac.uk
chocolate.wireless.bris.ac.uk
estates-servicedesk.bris.ac.uk
irisplus.bris.ac.uk
its-dc2-lemma2-p0-vip.computing-service.bristol.ac.uk
blogs.bristol.ac.uk
xerte-beta.bris.ac.uk
bos2-demo.ilrt.bris.ac.uk
xerte.bris.ac.uk
mediasite-dev.bristol.ac.uk
*.sls.bris.ac.uk
app-dc1-slsu-d0.services.bris.ac.uk
ole.bris.ac.uk
tender.bris.ac.uk
webmail.bris.ac.uk
www.cs.bris.ac.uk
arcadia.epi.bris.ac.uk
idp.bris.ac.uk
mediasite.services.bris.ac.uk
sso.bris.ac.uk
www.iser.bristol.ac.uk
corestream.bristol.ac.uk
its-splusiis-prod.cse.bris.ac.uk
myerp-archive.bristol.ac.uk
www.digitalscreens.bris.ac.uk
www.farscope.bris.ac.uk
myerp-int.bristol.ac.uk
ipadcrm.ilrt.bris.ac.uk
go.resnet.bristol.ac.uk
idhours.ilrt.bris.ac.uk
redcap-brtc-p1.epi.bris.ac.uk
www.ole.bris.ac.uk
missctrl.cs.bris.ac.uk
osier.ac.uk
reportandsupport.bris.ac.uk
research-information.bris.ac.uk
brainbanknetwork.ac.uk
contact.voicemail.bristol.ac.uk

Certificate

The complete raw certificate details for www.ole.bris.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOO3kqarR66mrsfAnIj7
O9WFh0D2mqG2fPBV9oazbt40Mw2pRwpTTXgnHhLUnPuzzD9O4jNtuzYODOS/+TF1
x5LlXm2Gnen3pHxzKj/u+xrqH71TAt/87WoVh+S7sCCFAXXK9ODwpGEoDUs0OBqk
3vUoWdAQQQ0uWR2v3YyD3SkVN4B48Z9clV13RlJujL3NgGES9yBhvbGuYXScrPPb
CQG9ga+/FirtID7SnuY9T8HiHugW7OLFvfAh4oq2WsKzb7RfrAwsUJvCjSRYwenH
nNmQ5N7rwagO/7n8txgwzQfLjj1N55yRTN1FwsCjJ1qHSNGlw5q56pc9kDlUHxve
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 49202408895491266472638407326932010162
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bristol, City of'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Bristol'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ole.bris.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22330233152058619071755727040781265475363281293806545037722858599563618699434244555761414489619957906771012537357306974323409785546445141993523752290592881691054745693163287122315105271950132045895510229068586289084694503953632546078090748276817699786863680420137626956245428499265495706581019750520793903314275308893949129960714520294573882479889837273393956458010589362474101659328432919261664692540997657117130474693000550671052456130849813862932916820222506136092355589228712340365529419795007048342698388246310309233751387061436374898525980330248108066363891904914012428396166224995053048677906401413549099048569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5aad06158c0b77fe1b943d2e6e7bd15b9bbcdbf9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ole.bris.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ole.bris.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ole.bristol.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ole.bristol.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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