develop.bristol.ac.uk

- University of Bristol -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 3c:32:1a:d9:ff:3c:f6:23:39:cb:e3:47:57:0e:08:55 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Bristol

Organization: University of Bristol
State / Province: Bristol, City of
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 3c:32:1a:d9:ff:3c:f6:23:39:cb:e3:47:57:0e:08:55
Serial Number (int): 80013839204175029700022599824687630421
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: d5:17:d1:58:48:c0:1d:dd:47:dc:7c:21:13:57:2b:41:02:b6:99:96
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 5d:64:29:55:57:98:fd:b9:59:b3:b8:8c:52:6a:ef:d2:05:39:f8:10
Fingerprint (sha256): 21:10:44:ce:28:61:fa:a6:8f:81:d7:56:69:3b:11:87:db:25:ce:36:70:7d:51:54:c1:61:bf:9b:45:8c:ad:49

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate develop.bristol.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for develop.bristol.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

develop.bristol.ac.uk
develop.bris.ac.uk

Other certificates including the domain name bristol.ac.uk

(limited to 100 certificates)
myerp-archive-test.bris.ac.uk
wwwa-dev.fen.bris.ac.uk
amis.bris.ac.uk
netmon.netcomms.bristol.ac.uk
estates.bris.ac.uk
DVAtraining.bristol.ac.uk
blogs.bristol.ac.uk
evision.apps.bristol.ac.uk
naturelocator.ilrt.bris.ac.uk
www.brtcrandomisation.bristol.ac.uk
fitnetnhs.bristol.ac.uk
aerosol-cdt.ac.uk
galaxy-gio.acrc.bristol.ac.uk
www.alspac.bristol.ac.uk
research-information.bris.ac.uk
dialogue.bristol.ac.uk
status.resnet.bris.ac.uk
blogs-test.bristol.ac.uk
evision-b.apps.bristol.ac.uk
blogs.bristol.ac.uk
proposals.epi.bris.ac.uk
data.bristol.ac.uk
www.survey.bris.ac.uk
xerte.bris.ac.uk
www.by-band.bristol.ac.uk
laharflow.bris.ac.uk
www.gradconnection.bristol.ac.uk
cteu.bristol.ac.uk
mwgit.bris.ac.uk
blogs.bristol.ac.uk
myerp-archive-test.bris.ac.uk
research-information.bris.ac.uk
interdelphi.rit.bristol.ac.uk
cteu-trials.bristol.ac.uk
app-dc2-cirx-p0-vip.services.bris.ac.uk
ci.ilrt.bristol.ac.uk
wwwtestdev-ole.bris.ac.uk
oas.apps.bristol.ac.uk
its-dc2-lemma2-p0-vip.computing-service.bristol.ac.uk
blogs.bristol.ac.uk
xerte-beta.bris.ac.uk
xerte.bris.ac.uk
mediasite-dev.bristol.ac.uk
rds-web.bristol.ac.uk
intelligentsystems.bristol.ac.uk
www.cs.bris.ac.uk
mediasite.services.bris.ac.uk
purchasing-system.bristol.ac.uk
www.iser.bristol.ac.uk
corestream.bristol.ac.uk
its-splusiis-prod.cse.bris.ac.uk
myerp-archive.bristol.ac.uk
www.digitalscreens.bris.ac.uk
myerp-int.bristol.ac.uk
go.resnet.bristol.ac.uk
blogs.bristol.ac.uk
manage.resnet.bristol.ac.uk
www.ole.bris.ac.uk
reportandsupport.bris.ac.uk
research-information.bris.ac.uk
contact.voicemail.bristol.ac.uk
heart-institute.bristol.ac.uk
consult.bristol.ac.uk
evision-b.apps.bristol.ac.uk
train.sls.bristol.ac.uk
seis.bristol.ac.uk
blogs.bristol.ac.uk
child-cough.bristol.ac.uk
blogs.bristol.ac.uk
blogs.bristol.ac.uk
www.bristol.ac.uk
leder-test.rit.bristol.ac.uk
imagelibrary.bristol.ac.uk
dedefi.ilrt.bristol.ac.uk
reportandsupport.bris.ac.uk
imagelibrary.bristol.ac.uk
training-data-warehouse.epi.bris.ac.uk
www.wireless.bris.ac.uk
dedefi.ilrt.bristol.ac.uk
gpo-srv.bristol.ac.uk
careers.bristol.ac.uk
fluff.bris.ac.uk
child-cough.bristol.ac.uk
fluff.bris.ac.uk
team.resnet.bristol.ac.uk
btc-test.bristol.ac.uk
blogs.bristol.ac.uk
blogs.bristol.ac.uk
sphere1-connect.een.bristol.ac.uk
ITS-SOCSWEB.cse.bris.ac.uk
www.brtcrandomisation.bristol.ac.uk
develop.bristol.ac.uk
mlbook.cs.bris.ac.uk
galaxy-gio.acrc.bristol.ac.uk
www.acrc.bris.ac.uk
www.gradconnection.bristol.ac.uk
ole.bristol.ac.uk
child-cough.bristol.ac.uk
parking-permits.bristol.ac.uk
www.wireless.bris.ac.uk

Certificate

The complete raw certificate details for develop.bristol.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6hVsfdHR/Ef2t/rxJ8Z
GpX+CfDgcGdKwnaCDocN3vjdeHADo80OHS1h7k4m2Jn+s62c530fXxraVmBQv5EE
Va3tmR2m6dEhp7UEEU0BD/d489dDQxOI8+9mgTADBqA3/KGzNugujkwgCYzVI/xy
5maalHsZXpOG1Icvr4sLXgVNnHzLVCsDVo0FZmKrJU1HZxARRg1JplHODZamVBAn
kPPnH2yMGZRCoeuN1w3NhadjvSrsJo+kz9qyvlT/SkAp0LQ3/2bO/bYvjCQHcDUd
+mOJPhjfH4WGpzx3guq+ZQ0xFsyVhGyU+PEev9cS/jZnEZ9IdVHZ94pVOrpxEffX
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 80013839204175029700022599824687630421
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bristol, City of'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Bristol'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'develop.bristol.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25709384865540532935950756747344888759735481044714841407815661637981850061896973243352097851191789136942554812127271746875262634705903743377721670035017763627718614836439813391717427334195313119265115799297895968282611011434552125573694744205460635497753619954941472924061303969580647428246932618625786390151950817909433492905678983686283920503569240725185771133479918442061630544565216610261828474833129238898753790133255315993228556094407148058435231281679596078089184682858756655582882874805904896187506134727152287462681524909445217626191068843529084655312495190929483227616020873868328943339842231588546734970849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d517d15848c01ddd47dc7c2113572b4102b69996
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop.bristol.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop.bris.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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