epsrc.ukri.org

- UK Research and Innovation -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number ca:89:b1:fe:3e:1a:a0:a2:f1:66:9f:01:28:8d:09:cf was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UK Research and Innovation

Organization: UK Research and Innovation
Organization unit: UKSBS
State / Province: Wiltshire
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): ca:89:b1:fe:3e:1a:a0:a2:f1:66:9f:01:28:8d:09:cf
Serial Number (int): 269219009947845663945122430739123341775
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 92:9c:a3:cf:f6:53:f5:b9:57:8a:a2:ba:f7:94:5e:45:62:76:4a:0e
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 8f:4d:47:b5:d6:aa:f4:f4:62:82:f8:b3:6f:3c:ae:be:06:cd:eb:91
Fingerprint (sha256): 2a:0e:80:ad:42:41:a9:37:52:81:a8:11:e3:1b:95:64:d7:b8:d8:ed:5e:58:38:4a:a5:22:d8:a2:61:c6:33:6a

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate epsrc.ukri.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for epsrc.ukri.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

epsrc.ukri.org
www.epsrc.ukri.org

Other certificates including the domain name ukri.org

(limited to 100 certificates)
nerc.ukri.org
riinfrastructure.ukri.org.uk
ahrc.ukri.org
webhelpdesk.ukri.org
ahrc.ukri.org
store.apps.ukri.org
www.ukri.org
ithelpdesk.ukri.org
ukinnovationhub.ukri.org
*.api.rap-test.ukritfsdigstaging.services.ukri.org
training.ukri.org
uknqt.ukri.org
webhelpdesk.ukri.org
funding-service.ukri.org
bbsrc.ukri.org
guest.ukri.org
energycatalyst.ukri.org
internal.demo-1.ukristaging.services.ukri.org
ui.demo-1.ukristaging.services.ukri.org
www.innovateuk.ukri.org
ausoriwsvlrpm01.ukri.org
beta.innovateukedge.ukri.org
ukfoodsystems.ukri.org
dev.mhp.ukri.org
re.ukri.org
ausoriwsvlrpm01.ukri.org
epsrc.ukri.org
esrc.ukri.org
ukri.org
*.services.ukri.org
r4ri.ukri.org
*.staging.services.ukri.org
vpn.ukri.org
*.sil.uat.innovateuk.ukri.org
helloworld.default.ukristaging.services.ukri.org
portal.nerc.ac.uk
engagementhub.ukri.org
internal.infradev-1.ukristaging.services.ukri.org
*.apps.org-env-0.org.innovateuk.ukri.org
jenkins29skjdnchg.beta.ukri.org
*.api.dev.ukristaging.services.ukri.org
stfc.ukri.org
ahrc.ukri.org
*.dev.whp.ukri.org
nerc.ukri.org
go.innovateuk.ukri.org
*.services.ukri.org
*.dev-1.ukristaging.services.ukri.org
internal.dr-1.ukridr.services.ukri.org
esrc.ukri.org
esrc.ukri.org
testgow.epsrc.ukri.org
stfc.ukri.org
nerc.ukri.org
ahrc.ukri.org
www.mrc.ukri.org
mrc.ukri.org
sts.ukri.org
epsrc.ukri.org
dev.coronavirusexplained.ukri.org
ukri.org
reporting.services.ukri.org
ukfoodsystems.ukri.org
*.api.rap-test.ukritfsdigstaging.services.ukri.org
mrc.ukri.org
vpn.ukri.org
farminginnovation.ukri.org
engagementhub.ukri.org
*.dev.services.ukri.org
ukfoodsystems.ukri.org
san-13-s51.tlsprovisioning.exacttarget.com
san-13-s51.tlsprovisioning.exacttarget.com
gow.bbsrc.ukri.org
*.nmgn.mrc.ukri.org
engagementhub.ukri.org
eduroam.ukri.org
anpr1.mscp.ukri.org
*.innovateuk.ukri.org
energycatalyst.ukri.org
anpr1.mscp.ukri.org
uatdirectory.apps.ukri.org
*.test-1.ukristaging.services.ukri.org
engagementhub.ukri.org
vpn.innovateuk.ukri.org
nerc.ukri.org
eduroam.ukri.org
app.info.innovateuk.org
*.api.dr-1.ukridr.services.ukri.org
webhelpdesk.ukri.org
www.bbsrc.ukri.org
epsrc.ukri.org
gow.epsrc.ukri.org
eds.ukri.org
coronavirusexplained.ukri.org
re.ukri.org
reporting.services.ukri.org
yopass.innovateuk.ukri.org
*.staging.innovateuk.ukri.org
apps.ukri.org
uatdirectory.apps.ukri.org

Certificate

The complete raw certificate details for epsrc.ukri.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCP+uN0Wcyd88B39zESK
fOufd8/rTgtnVdfGZf6YFI7c0xWeZPy+Txg5jQV3RvBX8r0nEghEBcqs+2HawLcP
iXDZdnjZGZSG/wU3rYr13vtIxxJCYlaBmcP8LYPTqcdbipRkTrluoCJfwsaxCVTq
SrWhsaDlFTQAk/QPH+f8QXiC5IfA0G+5k9zh3Y0XKh1B9rKTB/1SUSlZXxlP/xFd
aef/cSOqSz/M3X9psOawDPy4fRdlj2HKtXOmXIRb8wuMl7fnZH2yey+BQ36Q+l8R
IOJs2y4foTRJbo8WtnrVR4ayR0xeBnNZ6fCRG2l3JQYSwRc3pynUOWvfOOi+YzEz
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269219009947845663945122430739123341775
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wiltshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK Research and Innovation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UKSBS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'epsrc.ukri.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20215878594703774858991264484696232918378312440420998142139891765644457946864685313537098962095867422300609740795194293152028951402529806501261321435936686483049667420704292568862407531847880204766602785796866442724503712477414942062358323463270799312334186292346666490361447555550389142203959262521564701303385046846158915848149694383491632359536919552239645619701872691787056774385271372861436394124863570695905476005996570895276911757131611433909223639378838135307986494290130527129500599262225335893144399098585905441896739328655607157309194207581270205807507416507051604117745646892053859912029721422568893789037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							929ca3cff653f5b9578aa2baf7945e4562764a0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epsrc.ukri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epsrc.ukri.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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