*.cryst.bbk.ac.uk

- Birkbeck College -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 28:06:d3:a1:75:30:62:46:c5:c0:1d:f5:a9:a7:30:5c:cf:2d:53:6f was issued on by QuoVadis Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Birkbeck College

Organization: Birkbeck College
Organization unit: Department of Biological Sciences
State / Province: London
Locality: BLOOMSBURY
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 28:06:d3:a1:75:30:62:46:c5:c0:1d:f5:a9:a7:30:5c:cf:2d:53:6f
Serial Number (int): 228511870937708339430668189558258092659541103471
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: ca:6d:aa:15:cb:7d:bb:97:42:05:6f:f2:7c:80:2f:ff:c5:e5:d7:3d
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 62:63:30:39:a3:ba:67:4d:7b:fa:c7:6c:16:b5:9b:19:13:14:cb:ef
Fingerprint (sha256): 30:1f:f6:4c:65:56:ea:58:d6:84:be:7c:21:9b:89:5a:0f:15:e5:d3:f0:a7:6e:aa:93:a1:96:68:5c:e4:5c:a9

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate *.cryst.bbk.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cryst.bbk.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cryst.bbk.ac.uk
cryst.bbk.ac.uk

Other certificates including the domain name bbk.ac.uk

(limited to 100 certificates)
shame.bbk.ac.uk
apw01.its.bbk.ac.uk
vpn.dcs.bbk.ac.uk
moodle.bbk.ac.uk
www.dcs.bbk.ac.uk
www.dcs.bbk.ac.uk
web-test.its.bbk.ac.uk
media.bbk.ac.uk
*.cryst.bbk.ac.uk
www.bbk.ac.uk
eprints.bbk.ac.uk
sd2.its.bbk.ac.uk
fort.bbk.ac.uk
csi.bbk.ac.uk
www.19.bbk.ac.uk
moodle.bbk.ac.uk
*.ezproxy.lib.bbk.ac.uk
populus2.ccs.bbk.ac.uk
campaign.bbk.ac.uk
exchange.bbk.ac.uk
sim.openlibhums.org
populus2.ccs.bbk.ac.uk
olh.janewaysharedhosting.com
www.cbcd.bbk.ac.uk
sitr.mda.bbk.ac.uk
psyc.bbk.ac.uk
fort.bbk.ac.uk
shame.bbk.ac.uk
populus2.ccs.bbk.ac.uk
www.19.bbk.ac.uk
cis7.bbk.ac.uk
www.19.bbk.ac.uk
olh.janewaysharedhosting.com
pyrus.ccs.bbk.ac.uk
owa.bbk.ac.uk
lists.bbk.ac.uk
kif.dcs.bbk.ac.uk
fort.bbk.ac.uk
www2.bbk.ac.uk
vpn.dcs.bbk.ac.uk
zendto.its.bbk.ac.uk
puck.mda.bbk.ac.uk
sable.psychology.bbk.ac.uk
moodle.bbk.ac.uk
bisa.bbk.ac.uk
readings.bbk.ac.uk
eprints.bbk.ac.uk
cis6.bbk.ac.uk
populus2.ccs.bbk.ac.uk
side.mda.bbk.ac.uk
*.cryst.bbk.ac.uk
www5.bbk.ac.uk
pan.dcs.bbk.ac.uk
www.bbk.ac.uk
side.mda.bbk.ac.uk
briccentre.bbk.ac.uk
www4.bbk.ac.uk
wiki.bbk.ac.uk
www.19.bbk.ac.uk
olh.janewaysharedhosting.com
sim.openlibhums.org
populus2.ccs.bbk.ac.uk
cis-dev.bbk.ac.uk
app5.its.bbk.ac.uk
*.cryst.bbk.ac.uk
jarmanlab.bbk.ac.uk
fryitvpn.bbk.ac.uk
www.cbcd.bbk.ac.uk
*.ezproxy.lib.bbk.ac.uk
www2.bbk.ac.uk
www2.bbk.ac.uk
side.mda.bbk.ac.uk
uag.bbk.ac.uk
outlook.dcs.bbk.ac.uk
www.ict2012.bbk.ac.uk
kif.dcs.bbk.ac.uk
cis-dev2.bbk.ac.uk
sim.openlibhums.org
olh.janewaysharedhosting.com
wiki.bbk.ac.uk
uag.bbk.ac.uk
gandaki.bbk.ac.uk
tyto.ccs.bbk.ac.uk
tyto.ccs.bbk.ac.uk
*.cryst.bbk.ac.uk
media.bbk.ac.uk
side2.mda.bbk.ac.uk
smtp.dcs.bbk.ac.uk
cis.bbk.ac.uk
pyrus.ccs.bbk.ac.uk
zendto.its.bbk.ac.uk
www.survey.bbk.ac.uk
media.bbk.ac.uk
apw03.its.bbk.ac.uk
cis6.bbk.ac.uk
readings.bbk.ac.uk
pyrus.ccs.bbk.ac.uk
kif.dcs.bbk.ac.uk
psyc.bbk.ac.uk
dev.moodle.bbk.ac.uk

Certificate

The complete raw certificate details for *.cryst.bbk.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzZiuzV+Rz5gjih2XUGa
1iHjsZYEhO2QmgPn7SUxM+JCMV/nSQoGhL76BxiO2QQzDpTRFnKaEzI12vRFliU+
gnfaDBg5PnuyOprc6FghBZaWv6jafTVw1LsOkKHYgzzc4uQms9BG/qvjDz7l/mw8
JAWNWcOtYcMkh+OMvzUHrWQ/f3N220XLeRxeF+IP13GQg8od5xmsKDD8ZNC/GBOj
xGSrn7iCl9eUqbvsVwWSWAI8NGUisf9k1qPjFY1xk4ddkYs71iLRyJ7xpHwRb8In
bKB0TKDku3+JM49pPfGHSWgoJhncvu6zKXWt6H+vTJ2sCvH/hsbR+d/8r/Y+LYy+
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 228511870937708339430668189558258092659541103471
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-19 08:57:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-19 09:06:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BLOOMSBURY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Birkbeck College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Department of Biological Sciences'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cryst.bbk.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19593755842705324553248081976090119718166507647825644325343878819332812374789323583958614275707575857843619749561673564895661168583910003590289201068215594731719244255196597548786184131711744012054680125521723845349749863156530715165134449463855195550517298365440489691504942505057693381731828140000703333309245617507999784302129183543917224737809852738787572252831629775529726025206526503091963080559734675703387593475939519467671401654263252861158267307654758389065812066773049550249553925990015778981416055000928055661665048516165046634420982010180228636068495071217441900031630175034308922268165081065200250830447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryst.bbk.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryst.bbk.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca6daa15cb7dbb9742056ff27c802fffc5e5d73d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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