etest.libf.ac.uk

- The London Institute of Banking & Finance -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 71:f1:7b:ea:44:65:4e:dc:60:3d:0c:47:91:0d:49:77:16:e8:08:48 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The London Institute of Banking & Finance

Organization: The London Institute of Banking & Finance
Organization unit: IT
State / Province: Greater London
Locality: LONDON
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 71:f1:7b:ea:44:65:4e:dc:60:3d:0c:47:91:0d:49:77:16:e8:08:48
Serial Number (int): 650501231224096737609408849786979139745118423112
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: d4:b3:15:53:e3:21:a1:34:7f:c1:4d:7c:63:0f:6b:b3:2f:e8:42:bc
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): d8:30:a1:34:53:40:ff:e7:5a:d1:5d:51:98:1a:b4:5c:93:f2:18:3d
Fingerprint (sha256): 19:72:b2:ba:8d:6c:32:8c:78:78:35:d3:a2:cd:d0:fc:be:10:20:42:eb:b7:85:ba:84:21:1f:07:0d:ee:91:52

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate etest.libf.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for etest.libf.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

etest.libf.ac.uk

Other certificates including the domain name libf.ac.uk

(limited to 100 certificates)
jira.libf.ac.uk
lf-droner.dk
etest.libf.ac.uk
learn.libf.ac.uk
brightspace.libf.ac.uk
static.jexport.ci
fia.libf.ac.uk
libf.ac.uk
brightspace.libf.ac.uk
townhero.ru
*.libf.ac.uk
app-dev.nuna.ai
actioniq.ideacloud.com
brightspace.libf.ac.uk
canmail.libf.ac.uk
fia.libf.ac.uk
authlink.trouve.noren.io
libf.ac.uk
fia.libf.ac.uk
admin.coastlinesolutions.com
learn.libf.ac.uk
www.thecouponcalculator.com
fia.libf.ac.uk
fia.libf.ac.uk
*.libf.ac.uk
*.iu.org
*.libf.ac.uk
*.libf.ac.uk
onlinedegree.libf.ac.uk
learn.libf.ac.uk
oasis.libf.ac.uk
learn.libf.ac.uk
lonmail.libf.ac.uk
fia.libf.ac.uk
app.upbycellance.com
careanalytics.co.uk

Certificate

The complete raw certificate details for etest.libf.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBR/D/thgLa3FyZxyJdJ
ImYDZJwEwHAWGoWxB3lKzoHXRbCIC8tsnGO6dhm57GBCo0eqkH1/ZxYfrqtSdmpc
ZGtDArs/QjzJkIRj2Qq1LE9tSxo55XYMG+7eB5zVuMjBbgL30xar2/3xZuhl06hd
nTg+nDkNFNXk949NNHD3ruz5moWLFBRuhRvXh1aK/u7TKgxCB0yYblgCr3VG9EiL
I2RH9Bt1XV6r/6a6wFbi9pNC3Wdticx2s43peB0elfTmfjg0/CIUC3GQ909VRUAr
hkjWjmctS0qs26i5uudggsC7RK60vdOQWriBRI9MWXt6U0RStzAVp9HrWCqZ6Vr6
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 650501231224096737609408849786979139745118423112
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-03 11:47:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-03 11:57:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Greater London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LONDON'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'The London Institute of Banking & Finance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'etest.libf.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22733002014666208144965527353712607043157250943867316431908140935403775171177877539006267481602259161860801516623980828631792119921699682513406803925280048797132225134054823664320826840852716212482963710485437309081430737788536502429473648609155514289487787691423169100210594015232819154184392741271879865289355862446864158134775294133077340344711749056737101920476997139843440530677148503314893409035745143348016648401142075173167064146601726779007489263931343620244977025648027179633453334362897989552259445246613126551004921377914298409531875034382433987443646691418520023813192662988084331562567901246218496047831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etest.libf.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4b31553e321a1347fc14d7c630f6bb32fe842bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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