gow.bbsrc.ukri.org

- UK Research and Innovation -

Issued by GEANT EV RSA CA 4

About this certificate

This digital certificate with serial number c5:24:41:27:f4:10:bc:ee:b8:51:a4:89:4b:8e:91:dd was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UK Research and Innovation

Company registration number: Government Entity
Organization: UK Research and Innovation
State / Province: Wiltshire
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): c5:24:41:27:f4:10:bc:ee:b8:51:a4:89:4b:8e:91:dd
Serial Number (int): 262046159378592833589591289020120207837
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c3:aa:78:4a:b7:9f:77:90:a2:67:20:26:fc:37:db:d9:16:88:91:e6
AuthorityKeyId: b6:20:0e:ae:a3:cb:e9:55:03:06:13:66:d4:ac:be:27:90:54:60:f3

Fingerprint (sha1): 6d:5d:31:a6:c3:00:31:f2:51:20:a2:3a:47:bf:28:0a:f3:6b:18:be
Fingerprint (sha256): 1f:ae:15:8b:f5:13:28:e2:b5:2e:3b:ca:17:65:75:6d:47:e5:63:bd:95:69:40:3f:fe:f1:b5:f7:2f:06:31:96

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTEVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTEVRSACA4.crl

Check the revocation status for certificate gow.bbsrc.ukri.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gow.bbsrc.ukri.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gow.bbsrc.ukri.org
www.gow.bbsrc.ukri.org

Other certificates including the domain name ukri.org

(limited to 100 certificates)
nerc.ukri.org
riinfrastructure.ukri.org.uk
ahrc.ukri.org
webhelpdesk.ukri.org
ahrc.ukri.org
store.apps.ukri.org
www.ukri.org
ithelpdesk.ukri.org
ukinnovationhub.ukri.org
*.api.rap-test.ukritfsdigstaging.services.ukri.org
training.ukri.org
uknqt.ukri.org
webhelpdesk.ukri.org
funding-service.ukri.org
bbsrc.ukri.org
guest.ukri.org
energycatalyst.ukri.org
internal.demo-1.ukristaging.services.ukri.org
ui.demo-1.ukristaging.services.ukri.org
www.innovateuk.ukri.org
ausoriwsvlrpm01.ukri.org
beta.innovateukedge.ukri.org
ukfoodsystems.ukri.org
dev.mhp.ukri.org
re.ukri.org
ausoriwsvlrpm01.ukri.org
epsrc.ukri.org
esrc.ukri.org
ukri.org
*.services.ukri.org
r4ri.ukri.org
*.staging.services.ukri.org
vpn.ukri.org
*.sil.uat.innovateuk.ukri.org
helloworld.default.ukristaging.services.ukri.org
portal.nerc.ac.uk
engagementhub.ukri.org
internal.infradev-1.ukristaging.services.ukri.org
*.apps.org-env-0.org.innovateuk.ukri.org
jenkins29skjdnchg.beta.ukri.org
*.api.dev.ukristaging.services.ukri.org
stfc.ukri.org
ahrc.ukri.org
*.dev.whp.ukri.org
nerc.ukri.org
go.innovateuk.ukri.org
*.services.ukri.org
*.dev-1.ukristaging.services.ukri.org
internal.dr-1.ukridr.services.ukri.org
esrc.ukri.org
esrc.ukri.org
testgow.epsrc.ukri.org
stfc.ukri.org
nerc.ukri.org
ahrc.ukri.org
www.mrc.ukri.org
mrc.ukri.org
sts.ukri.org
epsrc.ukri.org
dev.coronavirusexplained.ukri.org
ukri.org
reporting.services.ukri.org
ukfoodsystems.ukri.org
*.api.rap-test.ukritfsdigstaging.services.ukri.org
mrc.ukri.org
vpn.ukri.org
farminginnovation.ukri.org
engagementhub.ukri.org
*.dev.services.ukri.org
ukfoodsystems.ukri.org
san-13-s51.tlsprovisioning.exacttarget.com
san-13-s51.tlsprovisioning.exacttarget.com
gow.bbsrc.ukri.org
*.nmgn.mrc.ukri.org
engagementhub.ukri.org
eduroam.ukri.org
anpr1.mscp.ukri.org
*.innovateuk.ukri.org
energycatalyst.ukri.org
anpr1.mscp.ukri.org
uatdirectory.apps.ukri.org
*.test-1.ukristaging.services.ukri.org
engagementhub.ukri.org
vpn.innovateuk.ukri.org
nerc.ukri.org
eduroam.ukri.org
app.info.innovateuk.org
*.api.dr-1.ukridr.services.ukri.org
webhelpdesk.ukri.org
www.bbsrc.ukri.org
epsrc.ukri.org
gow.epsrc.ukri.org
eds.ukri.org
coronavirusexplained.ukri.org
re.ukri.org
reporting.services.ukri.org
yopass.innovateuk.ukri.org
*.staging.innovateuk.ukri.org
apps.ukri.org
uatdirectory.apps.ukri.org

Certificate

The complete raw certificate details for gow.bbsrc.ukri.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262046159378592833589591289020120207837
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT EV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wiltshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK Research and Innovation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gow.bbsrc.ukri.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 724931452028904635215036392279277949872755191267810831064850042110642565432008999518376383355656575975546208819474005064730336430705316385139728688547263841382434922945443959333166646397642545505927959903076616086957388886301195134641086780997207133027168090178420953459171947942537964899519082188091830914393932658435174021258800813042447866287262808359937463520935091260074989191085664263144725050996276317227415197933418005946670812741193647254423951617519460144120521527112887070606503043681841254750218078268159634319802610968199252397247466146382835966513382607674991277250121247820423546957706003387585317903709936072300180698575997126036939918680962419318225333052023389632934803201032549470524632216248552532983640774867053736391298276685751038182570088770371802765455431844338515765322577251640772696351964549970107205761703453558300171543719758478377305321996913151289536330209947689457958786982787577273961725129047201099229457994821461238561335499032063277296713923020877097783528208119199172263487609354483407415604153507303859481821463164971515942366008387311398364122631784711935799550248509956394180199586805570935462663267985190890538115753211818481563100492970668244552731001372103147810619348718416514534760540707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b6200eaea3cbe95503061366d4acbe27905460f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3aa784ab79f7790a2672026fc37dbd9168891e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTEVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTEVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gow.bbsrc.ukri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gow.bbsrc.ukri.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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