*.cryst.bbk.ac.uk

- Birkbeck College -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 12:8b:59:fe:9b:00:7f:ec:91:9a:89:bd:dd:68:2b:84:68:ae:7a:8c was issued on by QuoVadis Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Birkbeck College

Organization: Birkbeck College
Organization unit: Department of Biological Sciences
State / Province: London, City of
Locality: Camden Town
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 12:8b:59:fe:9b:00:7f:ec:91:9a:89:bd:dd:68:2b:84:68:ae:7a:8c
Serial Number (int): 105869477088626926588781452759997913323833031308
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 57:f8:75:77:5d:54:c7:76:fa:5b:a7:b9:82:fa:c1:99:1d:e6:d4:ed
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): fc:14:33:bf:43:96:05:60:6b:c6:bf:8b:13:01:38:13:64:68:77:2c
Fingerprint (sha256): 27:af:0a:fa:8b:73:c5:a4:66:dc:26:fa:a4:c7:bb:51:88:80:c6:ae:07:78:90:9f:f9:df:1c:da:5e:33:2e:cc

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate *.cryst.bbk.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cryst.bbk.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cryst.bbk.ac.uk
cryst.bbk.ac.uk

Other certificates including the domain name bbk.ac.uk

(limited to 100 certificates)
shame.bbk.ac.uk
apw01.its.bbk.ac.uk
vpn.dcs.bbk.ac.uk
moodle.bbk.ac.uk
www.dcs.bbk.ac.uk
www.dcs.bbk.ac.uk
web-test.its.bbk.ac.uk
media.bbk.ac.uk
*.cryst.bbk.ac.uk
www.bbk.ac.uk
eprints.bbk.ac.uk
sd2.its.bbk.ac.uk
fort.bbk.ac.uk
csi.bbk.ac.uk
www.19.bbk.ac.uk
moodle.bbk.ac.uk
*.ezproxy.lib.bbk.ac.uk
populus2.ccs.bbk.ac.uk
campaign.bbk.ac.uk
exchange.bbk.ac.uk
sim.openlibhums.org
populus2.ccs.bbk.ac.uk
olh.janewaysharedhosting.com
www.cbcd.bbk.ac.uk
sitr.mda.bbk.ac.uk
psyc.bbk.ac.uk
fort.bbk.ac.uk
shame.bbk.ac.uk
populus2.ccs.bbk.ac.uk
www.19.bbk.ac.uk
cis7.bbk.ac.uk
www.19.bbk.ac.uk
olh.janewaysharedhosting.com
pyrus.ccs.bbk.ac.uk
owa.bbk.ac.uk
lists.bbk.ac.uk
kif.dcs.bbk.ac.uk
fort.bbk.ac.uk
www2.bbk.ac.uk
vpn.dcs.bbk.ac.uk
zendto.its.bbk.ac.uk
puck.mda.bbk.ac.uk
sable.psychology.bbk.ac.uk
moodle.bbk.ac.uk
bisa.bbk.ac.uk
readings.bbk.ac.uk
eprints.bbk.ac.uk
cis6.bbk.ac.uk
populus2.ccs.bbk.ac.uk
side.mda.bbk.ac.uk
*.cryst.bbk.ac.uk
www5.bbk.ac.uk
pan.dcs.bbk.ac.uk
www.bbk.ac.uk
side.mda.bbk.ac.uk
briccentre.bbk.ac.uk
www4.bbk.ac.uk
wiki.bbk.ac.uk
www.19.bbk.ac.uk
olh.janewaysharedhosting.com
sim.openlibhums.org
populus2.ccs.bbk.ac.uk
cis-dev.bbk.ac.uk
app5.its.bbk.ac.uk
*.cryst.bbk.ac.uk
jarmanlab.bbk.ac.uk
fryitvpn.bbk.ac.uk
www.cbcd.bbk.ac.uk
*.ezproxy.lib.bbk.ac.uk
www2.bbk.ac.uk
www2.bbk.ac.uk
side.mda.bbk.ac.uk
uag.bbk.ac.uk
outlook.dcs.bbk.ac.uk
www.ict2012.bbk.ac.uk
kif.dcs.bbk.ac.uk
cis-dev2.bbk.ac.uk
sim.openlibhums.org
olh.janewaysharedhosting.com
wiki.bbk.ac.uk
uag.bbk.ac.uk
gandaki.bbk.ac.uk
tyto.ccs.bbk.ac.uk
tyto.ccs.bbk.ac.uk
*.cryst.bbk.ac.uk
media.bbk.ac.uk
side2.mda.bbk.ac.uk
smtp.dcs.bbk.ac.uk
cis.bbk.ac.uk
pyrus.ccs.bbk.ac.uk
zendto.its.bbk.ac.uk
www.survey.bbk.ac.uk
media.bbk.ac.uk
apw03.its.bbk.ac.uk
cis6.bbk.ac.uk
readings.bbk.ac.uk
pyrus.ccs.bbk.ac.uk
kif.dcs.bbk.ac.uk
psyc.bbk.ac.uk
dev.moodle.bbk.ac.uk

Certificate

The complete raw certificate details for *.cryst.bbk.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6QeC/ZVGEfRW/9Yw2y6
gTphHHAxve7lm4XQ4+w3fqwD4kngLxP2gEDGjwb+lguVn26a7DxEifZgX0xYFQB0
t0qep8U80szpHSHEqWKs1iHRVTD4MShAwy9QdFm93Ozmxq4lpuX3vcAOVlt4s699
4naGqWbEcIsKxpj1/KVOGjRmUB62FmJZC4VlaNW+5MDU+95C7/v2QXe0Wmn6CWrf
6u4rP0R1424przTcjBuoIh01b4kRWC1FbHBx3M4rHxKcwUKM3QPJnRmq+dvrNWNX
07KsZWwUT0ySFtPNi+zilelu7fLUGFFQgWKq4VgfXw8uSIVsICbyB/gXQVz2aTRt
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 105869477088626926588781452759997913323833031308
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-25 09:06:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-25 09:16:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London, City of'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Camden Town'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Birkbeck College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Department of Biological Sciences'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cryst.bbk.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25707305199547314601476999850811959000149886279226818621108569958011026045837037380489531709101403660080242700393731474685625737267248991859751798892994058378639181831582269587638517694538731417420360622338165652508796533991298914710551282365271142251534213025990058764559430848397525502032888038524330980175236085459014789345861929424328426637270750299943581384820255441536278282605096428144113324842557558899252905705790625301427921080134423254568828774994407376010855370398316674788777442125486228139282566309219480376463265122147377176760192751211591649366760876204921422448376411403787456459589069529831288630641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryst.bbk.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryst.bbk.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57f875775d54c776fa5ba7b982fac1991de6d4ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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