on.abdn.ac.uk

- University of Aberdeen -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 58:b5:96:ac:c3:2e:d2:8a:90:73:39:4c:41:04:04:e7:df:ef:78:21 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Aberdeen

Organization: University of Aberdeen
Organization unit: IT Services
State / Province: Aberdeenshire
Locality: ABERDEEN
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 58:b5:96:ac:c3:2e:d2:8a:90:73:39:4c:41:04:04:e7:df:ef:78:21
Serial Number (int): 506440748344331370477306865110408216349883988001
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 2f:83:83:4d:0d:45:7e:fa:ed:87:f4:43:c9:6c:43:53:b4:f2:39:a8
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 1b:ed:0d:8c:5d:a5:1e:56:2e:4f:45:84:12:42:fe:9b:87:86:ba:f8
Fingerprint (sha256): 1b:0a:05:7d:09:79:4d:d4:f5:b5:b3:f2:1e:bb:55:c6:66:d0:c3:6a:1f:50:d3:9f:e1:49:9f:e6:1d:07:ca:46

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate on.abdn.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for on.abdn.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

on.abdn.ac.uk

Other certificates including the domain name abdn.ac.uk

(limited to 100 certificates)
surveyor.uoa.abdn.ac.uk
www.store.abdn.ac.uk
www.store.abdn.ac.uk
git.erg.abdn.ac.uk
passwordreset.abdn.ac.uk
crmwebtest.uoa.abdn.ac.uk
onlineidi.abdn.ac.uk
erg.abdn.ac.uk
hybrid.abdn.ac.uk
livehelp.abdn.ac.uk
remote.abdn.ac.uk
corporateepay-test.abdn.ac.uk
www.charttrials.abdn.ac.uk
grafana.erg.abdn.ac.uk
studporinfra.abdn.ac.uk
shiny.abdn.ac.uk
www.oceanlab.abdn.ac.uk
webct.abdn.ac.uk
rh7-satsvr.uoa.abdn.ac.uk
exhibitions.abdn.ac.uk
wpstaging.abdn.ac.uk
audri.abdn.ac.uk
shibserv2.abdn.ac.uk
ng-sdms-p.uoa.abdn.ac.uk
studporinfra.abdn.ac.uk
training.abdn.ac.uk
jenkins.erg.abdn.ac.uk
vpn.abdn.ac.uk
vpn.abdn.ac.uk
hybrid.csg.abdn.ac.uk
www.abdn.ac.uk
pure.abdn.ac.uk
www.store.abdn.ac.uk
webprint.abdn.ac.uk
online.abdn.ac.uk
crm-app-2.uoa.abdn.ac.uk
webhost.abdn.ac.uk
join.abdn.ac.uk
erg.abdn.ac.uk
maxwell.abdn.ac.uk
remote.abdn.ac.uk
viis.abdn.ac.uk
ewaruba.abdn.ac.uk
lm.abdn.ac.uk
jenkins.erg.abdn.ac.uk
est-k2-web.uoa.abdn.ac.uk
onlineidi.abdn.ac.uk
vpn.abdn.ac.uk
www.charttrials.abdn.ac.uk
onlineidi.abdn.ac.uk
maxgalaxy.abdn.ac.uk
www.store.abdn.ac.uk
www.csd.abdn.ac.uk
www.abdn.ac.uk
locit.abdn.ac.uk
at-b2.erg.abdn.ac.uk
training.abdn.ac.uk
sp.abdn.ac.uk
onesourcesss.abdn.ac.uk
on.abdn.ac.uk
m.abdn.ac.uk
seel.abdn.ac.uk
w3-test.abdn.ac.uk
cluedup.abdn.ac.uk
onlineidi.abdn.ac.uk
est-k2-service1.uoa.abdn.ac.uk
onlineidi.abdn.ac.uk
on.abdn.ac.uk
mbaruba2.abdn.ac.uk
www.eng.abdn.ac.uk
skaldic.abdn.ac.uk
old-homepages.abdn.ac.uk
adfs-dev.iam-dev.abdn.ac.uk
homepages.abdn.ac.uk
mbtrpz4.abdn.ac.uk
spdy.erg.abdn.ac.uk
aura-test.abdn.ac.uk
onlineidi.abdn.ac.uk
aulib.abdn.ac.uk
corporateweb102.abdn.ac.uk
aura-test.abdn.ac.uk
join.abdn.ac.uk
erg.abdn.ac.uk
www.store.abdn.ac.uk
homepages.abdn.ac.uk
trace.erg.abdn.ac.uk
ereg.abdn.ac.uk
audri.abdn.ac.uk
maxgalaxy.abdn.ac.uk
printmanage.abdn.ac.uk
directaccess-4-a.uoa.abdn.ac.uk
myit.abdn.ac.uk
shibserv2.abdn.ac.uk
jenkins.erg.abdn.ac.uk
trace.erg.abdn.ac.uk
join.abdn.ac.uk
www.psyc.abdn.ac.uk
1641dep.abdn.ac.uk
at-b2.erg.abdn.ac.uk
livehelp.abdn.ac.uk

Certificate

The complete raw certificate details for on.abdn.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHHCT053CrWPDJDOlugW
I1eeGz6Lg5H5GemWkwbKTKpbm/fUdtcXrSGPpkfyWeyBWQSwrcVj9ANrQrTfZ24P
tW+QtZ9hQTWRphThQtEixHzH0T0nKPtCNPTmo+3WmT5i4zLeKZ0vFz+BwZR1LO0A
VseEASWPnTPz93V3wZ89JOK0nuZbu18tad2Y7YBB8FC7I+CtS1mceOgrIfceU5KM
1nM4JSGo4ENzGsOMd+EwPOc3GIZ0tC9g+mMcx/stsZJpk7wdXDnXHU1VNv6SYhm7
SYySyKM2XNYLHskH5OaYTlHwGCUy7444kyIdfRKLEQx3JDYAIbdoeMscnkYDUxFB
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 506440748344331370477306865110408216349883988001
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-30 15:21:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-30 15:32:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Aberdeenshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ABERDEEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Aberdeen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'on.abdn.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23788897998424871289293849783537582569307292709162443239831627530518835925422645722219599291824680067742175412138263860434623952689092021097881142831172956510701759980499803993704216014851463460372772690527371940248613102414906396537375193706074090351304812405118421806938296593068135467116416955979519585912264058921225717630281498633835065722411903717485833591984940372500328997976152241822998808671491135500227199712098326748770528493902350011140617355184364644835737278599401584781259514287504985161357164095907618642744272570650476042514195037445779903319129116218291432202745973066323974227272165069419942330701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'on.abdn.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f83834d0d457efaed87f443c96c4353b4f239a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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