*.greenhead.ac.uk

- Greenhead College -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 5c:a0:dc:8b:83:94:5c:84:63:cf:ce:8c:b9:54:c8:d2 was issued on by GEANT Vereniging.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Greenhead College

Organization: Greenhead College
State / Province: West Yorkshire
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 5c:a0:dc:8b:83:94:5c:84:63:cf:ce:8c:b9:54:c8:d2
Serial Number (int): 123124216293127119785729327947916298450
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 59:5b:42:ff:ed:95:c6:c8:25:59:89:ec:94:cc:11:70:f1:0f:3c:35
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 11:37:77:f0:18:b0:00:3f:81:7b:f3:9c:02:06:f3:2f:76:6d:77:de
Fingerprint (sha256): 1e:b5:69:8a:53:15:56:c3:4f:48:6e:3d:0c:9f:09:ec:cd:e8:c0:b0:85:b0:c1:56:bf:63:76:52:39:8d:00:4c

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.greenhead.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.greenhead.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.greenhead.ac.uk

Other certificates including the domain name greenhead.ac.uk

(limited to 100 certificates)
fortinet.greenhead.ac.uk
cedar.greenhead.ac.uk
gatekeeper.greenhead.ac.uk
Moondoor.academic.greenhead.ac.uk
www.greenhead.ac.uk
exams.greenhead.ac.uk
*.greenhead.ac.uk
svn.dev.greenhead.ac.uk
*.dev.greenhead.ac.uk
*.mx.greenhead.ac.uk
moodle.greenhead.ac.uk
exams.greenhead.ac.uk
viper.greenhead.ac.uk
gmis.greenhead.ac.uk
xibo.greenhead.ac.uk
www.greenhead.ac.uk
library.greenhead.ac.uk
viper.greenhead.ac.uk
greenhead.ac.uk
moodle.greenhead.ac.uk
Parallels.greenhead.ac.uk
cas.greenhead.ac.uk
cas.greenhead.ac.uk
webmail.greenhead.ac.uk
assets.greenhead.ac.uk
exams.greenhead.ac.uk
greenhead.ac.uk
mail.greenhead.ac.uk
netman.greenhead.ac.uk
www.greenhead.ac.uk
www.greenhead.ac.uk
viper.greenhead.ac.uk
jira.dev.greenhead.ac.uk
mail.greenhead.ac.uk
www.greenhead.ac.uk
cedar.greenhead.ac.uk
netman.greenhead.ac.uk
www.greenhead.ac.uk
*.dev.greenhead.ac.uk
exams.greenhead.ac.uk
webmail.greenhead.ac.uk
cedar.greenhead.ac.uk
www.greenhead.ac.uk
gmis.greenhead.ac.uk
www.greenhead.ac.uk
netman.greenhead.ac.uk
assets.greenhead.ac.uk
gatekeeper.greenhead.ac.uk
jira.dev.greenhead.ac.uk
netman.greenhead.ac.uk
mail.greenhead.ac.uk
mail.greenhead.ac.uk
pholden.dev.greenhead.ac.uk
cedar.greenhead.ac.uk
www.greenhead.ac.uk
gcintranet.greenhead.ac.uk
greenhead.ac.uk
exams.greenhead.ac.uk
gatekeeper.greenhead.ac.uk
moodle.greenhead.ac.uk
autodiscover.greenhead.ac.uk
moodle.greenhead.ac.uk
svn.dev.greenhead.ac.uk

Certificate

The complete raw certificate details for *.greenhead.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rojW2c26Tg3eyHZ7UBG
GhNjKu8iW/M4t1rtGJo/vY/KvaiYZvunbVdcBXX01uLSfjwMmCe9S5+B8eLLn70B
6QMTSA5v6zwJrpc/fcBm6tuigOKSgigECaLOj9aA8jPryrM4/+5h8fhDWAktxuR0
29Yb+bpBB/0gll/Zz7W+y+BhK1VzfwC4EZgGvKxuhtPMw05LV9qzWF/9o/3uGP6c
ndZ9XY4MZi4nXecB7N0l6dDGuoRHV3cckvmLsT56g4AlXB9MPhbQZUrzMchJUzb1
Z0gLO3CzCx0MfvrrwB3iiW5dAg8h8wM2uanl04LMFSf0dYcRK0LMlAMnXcwDIx03
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 123124216293127119785729327947916298450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Yorkshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greenhead College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.greenhead.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29126598266926857105058042618823384270992831545301275941073008098548141698598108964704648255916019518237260592491704698596113182272610111276029880322450730943803353936032716185741809062573933357541174640237750060403563478619126199369876018713362768449291255162598136891010492113962794759192416015673823759290487190929415458944985063544093644786557517625709635429329462962706011856429629328172775284994707868493781079518615845113591272326704300557865192930094583170281618580347258987181469019660430541506006973780003019716704383651731006164259833458925120037844727561836059887465359280296759114704540743761111390435137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							595b42ffed95c6c8255989ec94cc1170f10f3c35
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenhead.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00422b0123043af80a54a54a53434f14c5d4770f43d2c2219c030d3ca06af477f39997161247d074ed8d8236555b68c7fc9ca5712e744a6002015b486d5ecb1535b4037c47b3c1103c708b9ad71b4906b2587f2fd65421d4d8e4e6eddc93e28f730021c09e4b9785801ac05519f678ee69168a371c6b7a54d6333476b4c0ea4f5899b862eb4a2c7a435018d0cae3af0f37697e17bae7e9bb0df4cedc44f3ef6e6fe620424603975197abba2b54ba3675064aeb5e71486c806384d193e81a550bd592b22e2173f2dd05b3c762f8ab3440b5468a337f3e30b6c748d0d4647b0242e0268e6515da00be45091cbf88fac7cdf4f9c9bd32c9de4db390ab6554651e4c3da9a4e99fc2317f139c42025733e69a99d1f86122f673aaa28f7e21738b374b206c4f621cdc74e0217be48cde448c354d5f053c5a8b2c8b927faa635435e068eb2cd9ebc2c310339c47ca1d266f1592ab3744c2369e443f8ebacb96564e529c26926bc22a1503ef75fe6f1d12a920f59c5f4db23aaaac9541b435b0c9ca7eed1f8a8964f780c3fc711a4de1ef3ed92987f0c9004c488512579c300b7743fc6d7ab228f4cb063df284eabc317a800883f4179b5f4ca016a6a68d8c35743556ee6bb592736e3ca01e890d72c9153c7148caa61646e2b95d3aec6f466b12673b3d4c9c46ecf4cd45d6007a7fb8e3f894b09e9b7210404879c2ba4d7c7f2c645ca36e