www.practicelearn.co.uk

- Leeds Beckett University -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 1d:e9:0e:14:64:e3:60:a0:59:66:28:ae:3e:0a:80:f2:1a:e4:26:63 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Leeds Beckett University

Organization: Leeds Beckett University
Organization unit: ITS
State / Province: West Yorkshire
Locality: Leeds
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:e9:0e:14:64:e3:60:a0:59:66:28:ae:3e:0a:80:f2:1a:e4:26:63
Serial Number (int): 170758032496902775237835931237029245002885375587
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: fa:d5:56:26:f0:38:16:31:c2:68:26:00:d6:ee:9a:33:76:b8:ae:b2
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 70:8a:35:ed:60:1d:9d:74:bb:e6:92:5c:c3:21:74:8d:15:8e:c2:3b
Fingerprint (sha256): 46:eb:40:f6:3a:a7:45:53:e9:5e:a4:b3:82:96:6e:60:67:78:f5:e7:34:be:17:a0:64:36:36:b7:c3:4d:cf:8a

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate www.practicelearn.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.practicelearn.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.practicelearn.co.uk

Other certificates including the domain name practicelearn.co.uk

(limited to 100 certificates)
www-train.practicelearn.co.uk
www.practicelearn.co.uk
www-dev.practicelearn.co.uk
www.practicelearn.co.uk
www-dev.practicelearn.co.uk
www-dev.practicelearn.co.uk
www-train.practicelearn.co.uk
www-dev.practicelearn.co.uk
www.practicelearn.co.uk
www-dev.practicelearn.co.uk
www.practicelearn.co.uk

Certificate

The complete raw certificate details for www.practicelearn.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 170758032496902775237835931237029245002885375587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-15 16:16:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-15 16:26:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'West Yorkshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Leeds'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Leeds Beckett University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ITS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.practicelearn.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 656066654326125506425262046302999207739134031732079620739193147969855429257821330740691606956355821992347998553965990725231983883211084267179050691192658949344319821883714598266203790358475242046610990087006315742877040579389818043478919578135971519883474845161549567875029447280874461713977249427025622477898557513790636725710159854015338082543571195001877610142701257936575711978022606703987156355310275699281103479293836802045926536402907717734495116153376121520120559529340746890685951835288486169884533914659924933959214535809543106552933349207228819433231492771039258629155585389788710377735900869283423151102483862905131480808380172866374332151071865996216415911291617754329623620361424031802236276982986524177233389883463031925299791748695797171364348705433478696202171708569675228270024915175039511424273619592640885882215265239528881977275984298537135473532186330500656094312925025456942900818561824512119688388962178011047023882297552594018529525491568108572627188301847341836078382944857458277054246040251589292343897051287127499564960135281433993425003133408703131682834359906336497520243335709734666120477305694139927594352868094375264627039448058167580847475197626591682248568957785465550885647498336658859722199229453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.practicelearn.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fad55626f0381631c2682600d6ee9a3376b8aeb2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00391e7919964d9b915e6f16176c935077c0bb114f671f9246a7bea8c9b507e546ee80bfea7cbf529e6760aa2c0cc2adc95d009267a996f9ae10ae171ed7581d006bdd9d4d344260f63ae64a646e5a6349c2b532fc35d4c6fb833be5f9c2948d4d14cf3d39d43c217d5e6734315624f427335ca8ea734862cb8dc15e20db250a807f1b78a90f2ab6ff81d134a99e1eeaaa1bb8f70ce6dcaedeed19e1ced7d96579cd1961de7e598a7b9c2fcb5bb727861614e84382ee7e9846e743b8b680a2ae1258d3a074f47742da4d5814dca4eb876c0d3f3f051327310af09c7fdaf1c25a558dd15d8d74e0619c952f3180351fbe9ce8887bf992856a390a5b8f408fafd6880db2c5aee69764b79aaa2c1ab20f5e84b0a4dbaea3669934552b964b2fd9a1dbc4184df9167fd561203cc619b92cbc87a3a58d657e52cf2b1d1e6e5d96813fe4489f4e0bc0eb274d8e6e0c501da501786e491a10d7f2a405dbd5b73c70470ec2b384a1c300ddba7f3a061923660891de875bc2905c3047bf7d550d26bef2e558f0178b3582328430035670e1bb09b0489a1527d765e919db562a6dbceea878b4bad78fdd57723d24c54a352ab24ec34314d1392e854c8ccb58d7605668f6381e47c0ee0d2b4ea5a8de4ff315fe986923fe1face24ad6805ad923096219e903d5389900793b0fd143e2c6846ad31e69cb2a3e524827ffbf2b7574870e803715a9