alumni.bathspa.ac.uk

- Blackbaud Inc. -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:0e:88 was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Blackbaud Inc.

Company registration number: LaBrKmx8FJ6-hhDOFcZmcfpWkAYhIrFp
Organization: Blackbaud Inc.
Organization unit: Hosting
State / Province: South Carolina
Locality: Charleston
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:0e:88
Serial Number (int): 134792
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: c2:f7:6b:29:b4:f8:92:eb:96:36:2a:ef:08:fa:00:ba:4a:2f:20:52
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 21:42:85:b5:ee:d1:a3:16:ff:ba:86:ad:dd:16:8b:fa:de:20:18:d7
Fingerprint (sha256): 20:48:d3:ff:c8:b0:4e:cc:07:b6:29:6f:bc:b9:20:ff:79:99:78:47:ba:2f:66:12:8c:48:10:42:79:3e:aa:7c

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate alumni.bathspa.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alumni.bathspa.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alumni.bathspa.ac.uk

Other certificates including the domain name bathspa.ac.uk

(limited to 100 certificates)
admin.kotaberbagi.com
eduroam.bathspa.ac.uk
*.bathspa.ac.uk
incapsula.com
sid.bathspa.ac.uk
mydevices.bathspa.ac.uk
reportandsupport.bathspa.ac.uk
researchspace.bathspa.ac.uk
emea-san1.blackboard.com
eu-central-1-san1.blackboard.com
reportandsupport.bathspa.ac.uk
imperva.com
edocs.bathspa.ac.uk
rap.bathspa.ac.uk
library.bathspa.ac.uk
eu-central-1-san1.blackboard.com
incapsula.com
incapsula.com
*.bathspa.ac.uk
data.bathspa.ac.uk
eu-central-1-san1.blackboard.com
imperva.com
www.bathspa.ac.uk
emea-san1.blackboard.com
sharepoint.bathspa.ac.uk
eu-central-1-san1.blackboard.com
emea-san1.blackboard.com
eu-central-1-san1.blackboard.com
adminweb.bathspa.ac.uk
auth.bathspa.ac.uk
strenton.com
incapsula.com
incapsula.com
incapsula.com
eu-central-1-san1.blackboard.com
incapsula.com
eu-central-1-san1.blackboard.com
evasys.bathspa.ac.uk
emea-san1.blackboard.com
incapsula.com
NPCCM-UNITY1.bathspa.ac.uk
eu-central-1-san1.blackboard.com
incapsula.com
incapsula.com
incapsula.com
eu-central-1-san1.blackboard.com
auth.bathspa.ac.uk
incapsula.com
liquidoffice.bathspa.ac.uk
auth.bathspa.ac.uk
eu-central-1-san1.blackboard.com
incapsula.com
alumni.bathspa.ac.uk
sulis.bathspa.ac.uk
emea-san1.blackboard.com
incapsula.com
reportandsupport.bathspa.ac.uk
NPCCM-TNPUB1-ms.bathspa.ac.uk
incapsula.com
incapsula.com
alumni.bathspa.ac.uk
strenton.com
incapsula.com
mycareer.bathspa.ac.uk
eu-central-1-san1.blackboard.com
emea-san1.blackboard.com
anyconnect.bathspa.ac.uk
incapsula.com
eu-central-1-san1.blackboard.com
eu-central-1-san1.blackboard.com
eu-central-1-san1.blackboard.com
website-static.figstatic.com
bsuconf2.bathspa.ac.uk
npwin-exchch1.bathspa.ac.uk
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.ezproxy.bathspa.ac.uk
alumni.bathspa.ac.uk
emea-san1.blackboard.com
data.bathspa.ac.uk
reportandsupport.bathspa.ac.uk
eu-central-1-san1.blackboard.com
NPCCM-UNITY1.bathspa.ac.uk
emea-san1.blackboard.com
t4-www.bathspa.ac.uk
eu-central-1-san1.blackboard.com
emea-san1.blackboard.com
auth.bathspa.ac.uk
www.bathspa.ac.uk
incapsula.com
alumni.bathspa.ac.uk
eu-central-1-san1.blackboard.com
tls.automattic.com
incapsula.com
incapsula.com
eu-central-1-san1.blackboard.com
blackboard.bathspa.ac.uk
incapsula.com

Certificate

The complete raw certificate details for alumni.bathspa.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uzHrdrJ046Rj8Vz6Sd1
7x3XdIW0eBjhUvJ9r4047uhLuSs0zqB8pB40xujBFcc52kipdfdNV4j/a7bx4ne3
JYGo47OtsYzUB7NLoWOLtWIV56dVRp/1ez6ux0DKbhHqSoi77ZceFFDYrdySc10o
aTmEbwulPKHp16hIN9CmYW/8Pd1j2sHtz96UfAExxWod+LSD5snfZv8eJoaCkMmL
w+8qKy4bMjTAUlOnbw/Wm4kqAj3pKKJeE7ZN4YVuYGjKw8HH4E9wzpNSans0VXLG
MjcMRe3rbnR5Il6EVIvTXyJ+H49EhrX7ezUcDorOp6fCi6Ll41cK7jbrRvsCDAkB
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 134792
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-03-02 22:22:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-04 17:51:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LaBrKmx8FJ6-hhDOFcZmcfpWkAYhIrFp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Charleston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Blackbaud Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alumni.bathspa.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26626804610902659050136141976930565291262659339491669424320896569791046805456177584400306141210298831532950740874645301958422650526258897908038371038347032992802941425536221612444477472065596882210611102541349108758941708696915931055319814825322719742666921469225575436817011642879345062328106352689465309934838397757267654251716662492941275768029668669545017616522611514168738016299825586283423003657287484877102765949526312902949553764938869807692699065494102911916786114666288131031906691757195170949206265869477508645120734097508630087718757329623902422803050251888854748770290144182110395569680467385784291885473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.bathspa.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2f76b29b4f892eb96362aef08fa00ba4a2f2052
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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