www.bbk.ac.uk

- Birkbeck College -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number cb:ba:c8:a1:7c:d9:15:e4:21:72:24:ce:5a:dd:8c:05 was issued on by GEANT Vereniging.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Birkbeck College

Organization: Birkbeck College
State / Province: London, City of
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): cb:ba:c8:a1:7c:d9:15:e4:21:72:24:ce:5a:dd:8c:05
Serial Number (int): 270803119636318876767689628905392409605
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 57:8b:a3:bd:7e:34:9e:12:48:14:15:ee:fb:ce:18:2b:63:c4:0e:ce
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 2d:5c:6b:68:a3:f6:09:99:a4:a7:17:cf:17:3d:e2:15:65:60:42:99
Fingerprint (sha256): 28:c5:81:02:30:55:4d:6d:77:de:c4:46:5c:b8:4c:2d:79:67:dd:08:39:46:c4:97:14:e6:96:42:e9:6e:c3:10

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.bbk.ac.uk

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bbk.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bbk.ac.uk
bbk.ac.uk
birkbeck.ac.uk
lbw01.its.bbk.ac.uk
rpw01.its.bbk.ac.uk
www.birkbeck.ac.uk

Other certificates including the domain name bbk.ac.uk

(limited to 100 certificates)
shame.bbk.ac.uk
apw01.its.bbk.ac.uk
vpn.dcs.bbk.ac.uk
moodle.bbk.ac.uk
www.dcs.bbk.ac.uk
www.dcs.bbk.ac.uk
web-test.its.bbk.ac.uk
media.bbk.ac.uk
*.cryst.bbk.ac.uk
www.bbk.ac.uk
eprints.bbk.ac.uk
sd2.its.bbk.ac.uk
fort.bbk.ac.uk
csi.bbk.ac.uk
www.19.bbk.ac.uk
moodle.bbk.ac.uk
*.ezproxy.lib.bbk.ac.uk
populus2.ccs.bbk.ac.uk
campaign.bbk.ac.uk
exchange.bbk.ac.uk
sim.openlibhums.org
populus2.ccs.bbk.ac.uk
olh.janewaysharedhosting.com
www.cbcd.bbk.ac.uk
sitr.mda.bbk.ac.uk
psyc.bbk.ac.uk
fort.bbk.ac.uk
shame.bbk.ac.uk
populus2.ccs.bbk.ac.uk
www.19.bbk.ac.uk
cis7.bbk.ac.uk
www.19.bbk.ac.uk
olh.janewaysharedhosting.com
pyrus.ccs.bbk.ac.uk
owa.bbk.ac.uk
lists.bbk.ac.uk
kif.dcs.bbk.ac.uk
fort.bbk.ac.uk
www2.bbk.ac.uk
vpn.dcs.bbk.ac.uk
zendto.its.bbk.ac.uk
puck.mda.bbk.ac.uk
sable.psychology.bbk.ac.uk
moodle.bbk.ac.uk
bisa.bbk.ac.uk
readings.bbk.ac.uk
eprints.bbk.ac.uk
cis6.bbk.ac.uk
populus2.ccs.bbk.ac.uk
side.mda.bbk.ac.uk
*.cryst.bbk.ac.uk
www5.bbk.ac.uk
pan.dcs.bbk.ac.uk
www.bbk.ac.uk
side.mda.bbk.ac.uk
briccentre.bbk.ac.uk
www4.bbk.ac.uk
wiki.bbk.ac.uk
www.19.bbk.ac.uk
olh.janewaysharedhosting.com
sim.openlibhums.org
populus2.ccs.bbk.ac.uk
cis-dev.bbk.ac.uk
app5.its.bbk.ac.uk
*.cryst.bbk.ac.uk
jarmanlab.bbk.ac.uk
fryitvpn.bbk.ac.uk
www.cbcd.bbk.ac.uk
*.ezproxy.lib.bbk.ac.uk
www2.bbk.ac.uk
www2.bbk.ac.uk
side.mda.bbk.ac.uk
uag.bbk.ac.uk
outlook.dcs.bbk.ac.uk
www.ict2012.bbk.ac.uk
kif.dcs.bbk.ac.uk
cis-dev2.bbk.ac.uk
sim.openlibhums.org
olh.janewaysharedhosting.com
wiki.bbk.ac.uk
uag.bbk.ac.uk
gandaki.bbk.ac.uk
tyto.ccs.bbk.ac.uk
tyto.ccs.bbk.ac.uk
*.cryst.bbk.ac.uk
media.bbk.ac.uk
side2.mda.bbk.ac.uk
smtp.dcs.bbk.ac.uk
cis.bbk.ac.uk
pyrus.ccs.bbk.ac.uk
zendto.its.bbk.ac.uk
www.survey.bbk.ac.uk
media.bbk.ac.uk
apw03.its.bbk.ac.uk
cis6.bbk.ac.uk
readings.bbk.ac.uk
pyrus.ccs.bbk.ac.uk
kif.dcs.bbk.ac.uk
psyc.bbk.ac.uk
dev.moodle.bbk.ac.uk

Certificate

The complete raw certificate details for www.bbk.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFdjJ6+kixE9JYC/j/R6
5TC4knhOkyCiGZV6fJ7FBUPUbqhn/Du6iXcjtpWIq/a2+DBGXZbWINOcGByJs+hF
dQggl1KmBNizCSz2mxwsS6EKQsIaJq5NYBX6yct86V30b5PH71UMTSv3Uhct6V7a
1UsGB7qyTux8GQMgbJP4aV3+q4cQX8E7zMfNM+IoOjV55uNAp7eM/tFlM67E4kyr
DHYMTkoHZ06cZsG8dvzq/P94nu+xgeA+VXdIyh42GvsTA2X9KmxV9cAe3ibYy4rS
ZGF2Xkx0oMwo52qP0Ki7WEUqP6M/leU7l7q4xo6sUvMNsUQfPPVwUSrcrQ0TWPLv
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270803119636318876767689628905392409605
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London, City of'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Birkbeck College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bbk.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23270940409444837746905250215513427521595686201219282912945522657665659468408095852619119272095170771066086415722957347181104504694632250512279262535984818454352090479683336657883074349734660071532569953869757085971264848590255899636698408021769088542339468670601875551823905629164444015895711716906260599800474703341628814054669324765750418933901541690238123645720596594661743675723585396556454516995919573814846279137632178481438512873280971605292287853912451758014739505889795977764338672651364003856553404756511641286546044950007372532446978647242625825198376925457619993918077533288195302360910002057541068189557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							578ba3bd7e349e12481415eefbce182b63c40ece
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbk.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbk.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birkbeck.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbw01.its.bbk.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpw01.its.bbk.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birkbeck.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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