digitool.abdn.ac.uk

- University of Aberdeen -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 06:31:a7:40:cc:f1:50:0a:f9:54:8f:be:4b:59:86:9b:ae:b0:21:3a was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Aberdeen

Organization: University of Aberdeen
Organization unit: IT Services
State / Province: Aberdeenshire
Locality: ABERDEEN
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 06:31:a7:40:cc:f1:50:0a:f9:54:8f:be:4b:59:86:9b:ae:b0:21:3a
Serial Number (int): 35361250941908602725829406139549727359002222906
Serial Number lenght: 155 bits, 20 octets

SubjectKeyId: c6:ad:8c:15:9b:fd:65:8b:6b:43:30:2b:1d:91:87:bb:f6:ae:33:c6
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): e9:76:e9:be:ea:2d:49:4a:a7:40:3b:b3:b1:53:d0:aa:d0:f1:82:de
Fingerprint (sha256): 2b:12:7e:90:60:da:d0:c9:5c:72:5e:0d:4f:2b:5a:ec:15:5f:92:3c:e7:2f:a4:44:50:fe:93:20:b3:df:4a:98

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate digitool.abdn.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digitool.abdn.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digitool.abdn.ac.uk

Other certificates including the domain name abdn.ac.uk

(limited to 100 certificates)
surveyor.uoa.abdn.ac.uk
www.store.abdn.ac.uk
www.store.abdn.ac.uk
git.erg.abdn.ac.uk
passwordreset.abdn.ac.uk
crmwebtest.uoa.abdn.ac.uk
onlineidi.abdn.ac.uk
erg.abdn.ac.uk
hybrid.abdn.ac.uk
livehelp.abdn.ac.uk
remote.abdn.ac.uk
corporateepay-test.abdn.ac.uk
www.charttrials.abdn.ac.uk
grafana.erg.abdn.ac.uk
studporinfra.abdn.ac.uk
shiny.abdn.ac.uk
www.oceanlab.abdn.ac.uk
webct.abdn.ac.uk
rh7-satsvr.uoa.abdn.ac.uk
exhibitions.abdn.ac.uk
wpstaging.abdn.ac.uk
audri.abdn.ac.uk
shibserv2.abdn.ac.uk
ng-sdms-p.uoa.abdn.ac.uk
studporinfra.abdn.ac.uk
training.abdn.ac.uk
jenkins.erg.abdn.ac.uk
vpn.abdn.ac.uk
vpn.abdn.ac.uk
hybrid.csg.abdn.ac.uk
www.abdn.ac.uk
pure.abdn.ac.uk
www.store.abdn.ac.uk
webprint.abdn.ac.uk
online.abdn.ac.uk
crm-app-2.uoa.abdn.ac.uk
webhost.abdn.ac.uk
join.abdn.ac.uk
erg.abdn.ac.uk
maxwell.abdn.ac.uk
remote.abdn.ac.uk
viis.abdn.ac.uk
ewaruba.abdn.ac.uk
lm.abdn.ac.uk
jenkins.erg.abdn.ac.uk
est-k2-web.uoa.abdn.ac.uk
onlineidi.abdn.ac.uk
vpn.abdn.ac.uk
www.charttrials.abdn.ac.uk
onlineidi.abdn.ac.uk
maxgalaxy.abdn.ac.uk
www.store.abdn.ac.uk
www.csd.abdn.ac.uk
www.abdn.ac.uk
locit.abdn.ac.uk
at-b2.erg.abdn.ac.uk
training.abdn.ac.uk
sp.abdn.ac.uk
onesourcesss.abdn.ac.uk
on.abdn.ac.uk
m.abdn.ac.uk
seel.abdn.ac.uk
w3-test.abdn.ac.uk
cluedup.abdn.ac.uk
onlineidi.abdn.ac.uk
est-k2-service1.uoa.abdn.ac.uk
onlineidi.abdn.ac.uk
on.abdn.ac.uk
mbaruba2.abdn.ac.uk
www.eng.abdn.ac.uk
skaldic.abdn.ac.uk
old-homepages.abdn.ac.uk
adfs-dev.iam-dev.abdn.ac.uk
homepages.abdn.ac.uk
mbtrpz4.abdn.ac.uk
spdy.erg.abdn.ac.uk
aura-test.abdn.ac.uk
onlineidi.abdn.ac.uk
aulib.abdn.ac.uk
corporateweb102.abdn.ac.uk
aura-test.abdn.ac.uk
join.abdn.ac.uk
erg.abdn.ac.uk
www.store.abdn.ac.uk
homepages.abdn.ac.uk
trace.erg.abdn.ac.uk
ereg.abdn.ac.uk
audri.abdn.ac.uk
maxgalaxy.abdn.ac.uk
printmanage.abdn.ac.uk
directaccess-4-a.uoa.abdn.ac.uk
myit.abdn.ac.uk
shibserv2.abdn.ac.uk
jenkins.erg.abdn.ac.uk
trace.erg.abdn.ac.uk
join.abdn.ac.uk
www.psyc.abdn.ac.uk
1641dep.abdn.ac.uk
at-b2.erg.abdn.ac.uk
livehelp.abdn.ac.uk

Certificate

The complete raw certificate details for digitool.abdn.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5fF6J+HQS7sOstEOAdK
h8KN8M5iN088ggJofJD0sr+HIwMZ/OrZnKoZPJZURZ695bpn5dx7aWbRhmLIH3fa
nRyMoFd84TshOP9a05zJKPOj2/OLb9TtQzoDoHemekDpk5GdmqrV0eriq9vKvYlG
nDgqffAcH0dWKAh/2Oy/LZfjrWESV7CrFwFhVmc/VNEcZSRxNqVvtxLgsM1p6Xs7
u+H+JErbzuKXKpbsjShMWOAZU4lQUn8Qu0xMAoiJ4L8b7xuukrjBaoQ/y8nvBHIw
w7gz601RT9fiUlKeyL2M4uOTm6bUKTJAvBkZIPPT7KksfwH38MT8qb5582rqZonE
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35361250941908602725829406139549727359002222906
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-18 10:04:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-18 10:14:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Aberdeenshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ABERDEEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Aberdeen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'digitool.abdn.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23681405124197405153557424215912546358150939002101016802630582840413110664943821090204877060710744256983824469653161691632237886167886575505901693156126285013551767834723561509212498832220360893652237142381214354043115918187157785015491680114832177634254732283848511676350361040660923229292162116669506271402947082624677657926829170313564351134002876608011312134856870892168102425486227924662440088108760410108243947736950974367177203968916740644555256280072193573591643136795204549109411388617425540425357677507780988618930833394468883180985456602387042259776758622973202532203237475105170931839265315516821709374691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitool.abdn.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6ad8c159bfd658b6b43302b1d9187bbf6ae33c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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