shop.brighton.ac.uk

- University of Brighton -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 6d:f0:54:ae:29:8d:f6:77:ad:2d:65:51:9e:f9:8f:96 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

University of Brighton

Organization: University of Brighton
Organization unit: admin
State / Province: East Sussex
Locality: Brighton
Country: GB

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:f0:54:ae:29:8d:f6:77:ad:2d:65:51:9e:f9:8f:96
Serial Number (int): 146133720307571680852709524314581995414
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 81:86:e0:08:74:9a:de:af:40:00:e3:9a:0e:9d:79:b9:4c:46:14:d5
Fingerprint (sha256): 18:06:84:7c:66:85:db:6b:2b:a4:95:f8:15:75:f5:49:5d:fb:59:3f:61:38:17:5e:d9:47:78:96:58:3c:46:c9

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate shop.brighton.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.brighton.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.brighton.ac.uk

Other certificates including the domain name brighton.ac.uk

(limited to 100 certificates)
email.brighton.ac.uk
dataviewdev.brighton.ac.uk
idp.brighton.ac.uk
id.dev.brighton.ac.uk
evsidv.brighton.ac.uk
www.inam.brighton.ac.uk
researchers.brighton.ac.uk
shop.brighton.ac.uk
wadslive.brighton.ac.uk
staffmail.dev.brighton.ac.uk
evsipr.brighton.ac.uk
www.brighton.ac.uk
authenticate.brighton.ac.uk
wattsmedia.brighton.ac.uk
prism.brighton.ac.uk
shs.brighton.ac.uk
arch.brighton.ac.uk
pay.brighton.ac.uk
timetable.brighton.ac.uk
tel-ms-pro01.university.brighton.ac.uk
lists.brighton.ac.uk
mailer.brighton.ac.uk
data4impact.brighton.ac.uk
mysite.brighton.ac.uk
ahs.brighton.ac.uk
prism.brighton.ac.uk
alumni.brighton.ac.uk
emea-san1.blackboard.com
eu-central-1-san1.blackboard.com
mimosa.brighton.ac.uk
alumni.brighton.ac.uk
alumni.brighton.ac.uk
studentfolio.brighton.ac.uk
socialwork.brighton.ac.uk
peri.brighton.ac.uk
screenarchive.brighton.ac.uk
lyncwsext.brighton.ac.uk
unicard.brighton.ac.uk
dataview.brighton.ac.uk
voicemail.brighton.ac.uk
idp-test.brighton.ac.uk
remote.brighton.ac.uk
extranet.brighton.ac.uk
evsipr.brighton.ac.uk
blogs.brighton.ac.uk
studentcentral.brighton.ac.uk
uni.brighton.ac.uk
unicardcentral.brighton.ac.uk
evsite.brighton.ac.uk
studentcentralsupport.brighton.ac.uk
autodiscover.brighton.ac.uk
check-mk.brighton.ac.uk
peri.brighton.ac.uk
eu-central-1-san1.blackboard.com
mailer.brighton.ac.uk
efin5.brighton.ac.uk
shs.brighton.ac.uk
about.brighton.ac.uk
emea-san1.blackboard.com
smtp.brighton.ac.uk
dataview.brighton.ac.uk
staffmaildev.brighton.ac.uk
remote.brighton.ac.uk
email.brighton.ac.uk
autodiscoverdev.brighton.ac.uk
student.brighton.ac.uk
resource.brighton.ac.uk
emea-san1.blackboard.com
www.inam.brighton.ac.uk
eu-central-1-san1.blackboard.com
studentfoliotest.brighton.ac.uk
holiday.brighton.ac.uk
idp-test.brighton.ac.uk
stsdev.brighton.ac.uk
security.brighton.ac.uk
pay.brighton.ac.uk
blogs.brighton.ac.uk
sclink.brighton.ac.uk
eu-central-1-san1.blackboard.com
confirm.brighton.ac.uk
shs.brighton.ac.uk
issd.brighton.ac.uk
issd-dev.brighton.ac.uk
socialwork.brighton.ac.uk
peri.brighton.ac.uk
www.brighton.ac.uk
emea-san1.blackboard.com
transport.brighton.ac.uk
shop.brighton.ac.uk
studentcentraltestsupport.brighton.ac.uk
eu-central-1-san1.blackboard.com
authgen.brighton.ac.uk
pcbookings.brighton.ac.uk
tel-krnl-pro01.university.brighton.ac.uk
*.brighton.ac.uk
springboard.brighton.ac.uk
sportbookings.brighton.ac.uk
moviesandmemories.brighton.ac.uk
alumni.brighton.ac.uk
myinfo.brighton.ac.uk

Certificate

The complete raw certificate details for shop.brighton.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIXuGY2oDja6ES1lUOc0
8vzd6L0P16E6/h1JRjJ/ZeY/vhWMo4vHj/XGalqFbSgKD5W/XlmP9XFEJP9Ps3Tt
nUbG/tGkmD+s9g2Xq8uRjXxP4ZH6csK09hIqt28+Hpki4LDCEAX/VumtvO5k2oXu
M+VThBM9wqFgndUP9vjB/8cUZYigFbnoS8rnvGjuz9XbztPkhIGuEPMd+6JTA/US
gOiZxKEsTxZWI+JlCiXXkUnHdw5Ivmdi44/fVVUH5ColT2QtfgfIkTBVgQRypRrj
91TlxGD+j92H2Iu1c+BsyVoZlqAoX9C/C5Zoae7AsyrzAqKX+SBraSPBCMxUVh79
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 146133720307571680852709524314581995414
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'East Sussex'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Brighton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'University of Brighton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'admin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'shop.brighton.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22788938276533536436776008684648520861550398758252702500346898504364688576665021124571657772613633696660236603297274492145500165837011095941813878847569188006954242794588401981199128850832735838025355233481416120219585533561429511797629110974662824558534160708509683605018304062642488854935646448404352167725243972250419332081282316196057745406298800962305124169245863305436779958632281549942863902605972817474100732674575095955040328008215480047970225852980830534557188814015428115695783640578763553777207208287471233642835883007012465446898914027275734244526779786987677624913472411923667248909819809529133189234131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.brighton.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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