*.ezproxy.bathspa.ac.uk

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:89:1b:dc:c7:29:c4:4c:2c:df:4f:32:b3:c7:bc:a2:ba was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.ezproxy.bathspa.ac.uk,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:89:1b:dc:c7:29:c4:4c:2c:df:4f:32:b3:c7:bc:a2:ba
Serial Number (int): 1492320427853662319540128462116686997004986
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 13:17:6f:13:c1:25:ef:5d:e6:66:99:7e:b1:cb:5f:bd:22:06:44:4d
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): ff:76:82:71:f3:06:ac:5b:ab:cb:47:db:5d:84:56:cb:13:b0:e1:89
Fingerprint (sha256): 33:02:37:b6:3e:fa:75:31:41:2f:bf:75:0a:8b:b3:14:cb:22:35:0f:25:33:4a:b1:c6:9c:76:b6:8a:b2:38:15

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate *.ezproxy.bathspa.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ezproxy.bathspa.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ezproxy.bathspa.ac.uk
ezproxy.bathspa.ac.uk

Other certificates including the domain name bathspa.ac.uk

(limited to 100 certificates)
admin.kotaberbagi.com
eduroam.bathspa.ac.uk
*.bathspa.ac.uk
incapsula.com
sid.bathspa.ac.uk
mydevices.bathspa.ac.uk
reportandsupport.bathspa.ac.uk
researchspace.bathspa.ac.uk
emea-san1.blackboard.com
eu-central-1-san1.blackboard.com
reportandsupport.bathspa.ac.uk
imperva.com
edocs.bathspa.ac.uk
rap.bathspa.ac.uk
library.bathspa.ac.uk
eu-central-1-san1.blackboard.com
incapsula.com
incapsula.com
*.bathspa.ac.uk
data.bathspa.ac.uk
eu-central-1-san1.blackboard.com
imperva.com
www.bathspa.ac.uk
emea-san1.blackboard.com
sharepoint.bathspa.ac.uk
eu-central-1-san1.blackboard.com
emea-san1.blackboard.com
eu-central-1-san1.blackboard.com
adminweb.bathspa.ac.uk
auth.bathspa.ac.uk
strenton.com
incapsula.com
incapsula.com
incapsula.com
eu-central-1-san1.blackboard.com
incapsula.com
eu-central-1-san1.blackboard.com
evasys.bathspa.ac.uk
emea-san1.blackboard.com
incapsula.com
NPCCM-UNITY1.bathspa.ac.uk
eu-central-1-san1.blackboard.com
incapsula.com
incapsula.com
incapsula.com
eu-central-1-san1.blackboard.com
auth.bathspa.ac.uk
incapsula.com
liquidoffice.bathspa.ac.uk
auth.bathspa.ac.uk
eu-central-1-san1.blackboard.com
incapsula.com
alumni.bathspa.ac.uk
sulis.bathspa.ac.uk
emea-san1.blackboard.com
incapsula.com
reportandsupport.bathspa.ac.uk
NPCCM-TNPUB1-ms.bathspa.ac.uk
incapsula.com
incapsula.com
alumni.bathspa.ac.uk
strenton.com
incapsula.com
mycareer.bathspa.ac.uk
eu-central-1-san1.blackboard.com
emea-san1.blackboard.com
anyconnect.bathspa.ac.uk
incapsula.com
eu-central-1-san1.blackboard.com
eu-central-1-san1.blackboard.com
eu-central-1-san1.blackboard.com
website-static.figstatic.com
bsuconf2.bathspa.ac.uk
npwin-exchch1.bathspa.ac.uk
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.ezproxy.bathspa.ac.uk
alumni.bathspa.ac.uk
emea-san1.blackboard.com
data.bathspa.ac.uk
reportandsupport.bathspa.ac.uk
eu-central-1-san1.blackboard.com
NPCCM-UNITY1.bathspa.ac.uk
emea-san1.blackboard.com
t4-www.bathspa.ac.uk
eu-central-1-san1.blackboard.com
emea-san1.blackboard.com
auth.bathspa.ac.uk
www.bathspa.ac.uk
incapsula.com
alumni.bathspa.ac.uk
eu-central-1-san1.blackboard.com
tls.automattic.com
incapsula.com
incapsula.com
eu-central-1-san1.blackboard.com
blackboard.bathspa.ac.uk
incapsula.com

Certificate

The complete raw certificate details for *.ezproxy.bathspa.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC4s9dPH5owPRNMbZT53
9uNTcvZvYvDCfoyXFyB4tk8l9AZLZ/yTTY1GNq/IIwDKxWmOOvT0DESgSuOMZSb+
Rv+PfO3kCVSbQDD/LBtOrNkCmMxb+pjI6WUrF2gyC2PLHXZOKWVyRH/eNg5pr4om
HiYtxiaUIIPB/sz8qRG9H27zxeemxHL697IIIrciJnNFlRkU9K5amfhFOCbd2SdC
m+XTQ2stBlsMToRkPm4YdE1jA7kE+hVQHGu7mDFiQgSYruOWc2ZMT/xHM5FceDQR
Z6tsIDFQswuyic9AXT/XM5D3yuLIHBTmAlCTBzbHH8YYbN1OAcfaWf/VKD0u5ZWy
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492320427853662319540128462116686997004986
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-11 10:05:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-12 10:05:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.ezproxy.bathspa.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20220898844414398422324211877390126987941869136006131673739572759794654026334602196586650498347641232784373501089143139913429854253468283241333339404440465354387310413277156405579145324121959754760874962921502935822359921063348485278880138398672281966459349787936142566414951163553891969802372173981452163350138540098308826390428939069712643088001210299437858801891483050649329682537474338758682919403625585659771936576788693860871779165039370556567495568813378726798053880117010299050113360138066188651683686964730408844482989726328387444633867453167294582314891468544344757059367692932900208520924030417263662576283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ezproxy.bathspa.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezproxy.bathspa.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13176f13c125ef5de666997eb1cb5fbd2206444d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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