*.leedsbeckett.ac.uk

- Leeds Beckett University -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 59:d1:56:4d:6d:f9:f1:0a:e9:b2:f9:74:a4:7b:00:de was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Leeds Beckett University

Organization: Leeds Beckett University
State / Province: West Yorkshire
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 59:d1:56:4d:6d:f9:f1:0a:e9:b2:f9:74:a4:7b:00:de
Serial Number (int): 119388232090121746196052419977410183390
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d2:53:40:2a:91:64:2a:d9:0e:78:6a:78:f6:8e:7b:1b:fd:f9:b1:bc
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 8d:85:7b:b2:c3:7e:e1:7f:d2:fa:52:20:17:6f:2b:00:0a:b0:b6:a3
Fingerprint (sha256): 46:ed:8c:6d:a4:93:0c:ca:b4:04:6d:f5:6b:06:63:08:03:37:4d:99:23:ae:cd:72:3d:d8:36:7c:d0:1f:76:c7

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.leedsbeckett.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.leedsbeckett.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.leedsbeckett.ac.uk
leedsbeckett.ac.uk

Other certificates including the domain name leedsbeckett.ac.uk

(limited to 100 certificates)
myhub.leedsbeckett.ac.uk
surveys.leedsbeckett.ac.uk
vpn-sta.leedsbeckett.ac.uk
www.studygroup.com
my.leedsbeckett.ac.uk
aet-ovirt.aet.leedsbeckett.ac.uk
www.studygroup.com
xap.leedsbeckett.ac.uk
fms.leedsbeckett.ac.uk
my-staging.leedsbeckett.ac.uk
libanswers.leedsbeckett.ac.uk
libanswers.leedsbeckett.ac.uk
vts.leedsbeckett.ac.uk
webdrive.aet.leedsbeckett.ac.uk
oala-dev.leedsbeckett.ac.uk
www.studygroup.com
onlinestore.leedsbeckett.ac.uk
eu-central-1-san1.blackboard.com
my-dev.leedsbeckett.ac.uk
*.leedsbeckett.ac.uk
www.studygroup.com
myhub.leedsbeckett.ac.uk
lbmail.leedsbeckett.ac.uk
libguides.leedsbeckett.ac.uk
www.studygroup.com
catalogue-dev.leedsbeckett.ac.uk
vhd.leedsmet.ac.uk
www.leedsbeckett.ac.uk
www.studygroup.com
eu-central-1-san1.blackboard.com
symplectic-web.leedsbeckett.ac.uk
i-print.leedsbeckett.ac.uk
libguides.leedsbeckett.ac.uk
sspr.leedsbeckett.ac.uk
www.studygroup.com
libanswers.leedsbeckett.ac.uk
libanswers.leedsbeckett.ac.uk
libcal.leedsbeckett.ac.uk
onlinestore.leedsbeckett.ac.uk
libcal.leedsbeckett.ac.uk
libguides.leedsbeckett.ac.uk
eu-central-1-san1.blackboard.com
vts.leedsbeckett.ac.uk
libguides.leedsbeckett.ac.uk
cc-lywebext.leedsbeckett.ac.uk
www.aet.leedsbeckett.ac.uk
workpro.leedsbeckett.ac.uk
archives.leedsbeckett.ac.uk
payments.leedsbeckett.ac.uk
exc-mailbox2.leedsbeckett.ac.uk
eprints.leedsbeckett.ac.uk
webfiles.leedsbeckett.ac.uk
my.leedsbeckett.ac.uk
webresources.leedsbeckett.ac.uk
exc-mailbox1.leedsbeckett.ac.uk
*.leedsbeckett.ac.uk
welcome.leedsbeckett.ac.uk
i-print.leedsbeckett.ac.uk
skyline.leedsbeckett.ac.uk
vacancies.leedsbeckett.ac.uk
eduroam.leedsbeckett.ac.uk
www.studygroup.com
libguides.leedsbeckett.ac.uk
eu-central-1-san1.blackboard.com
eu-central-1-san1.blackboard.com
peopledevelopment.leedsbeckett.ac.uk
www.studygroup.com
replay.leedsbeckett.ac.uk
library-rfid.leedsbeckett.ac.uk
zendto.leedsbeckett.ac.uk
libanswers.leedsbeckett.ac.uk
zendto.leedsbeckett.ac.uk
sspr.leedsbeckett.ac.uk
www.wellmetshortstay.com
exc-mailbox3.leedsbeckett.ac.uk
registration.leedsbeckett.ac.uk
onlinestore.leedsbeckett.ac.uk
www.studygroup.com
*.ezproxy.leedsbeckett.ac.uk
www.studygroup.com
applyonline.leedsbeckett.ac.uk
cc-lysbc02.leedsbeckett.ac.uk
replay.leedsbeckett.ac.uk
nfsbookings.aet.leedsbeckett.ac.uk
libguides.leedsbeckett.ac.uk
registration.leedsbeckett.ac.uk
libcal.leedsbeckett.ac.uk
myhub.leedsbeckett.ac.uk
libguides.leedsbeckett.ac.uk
campusm.dev.leedsbeckett.ac.uk
e-pay.leedsbeckett.ac.uk
*.leedsbeckett.ac.uk
www-dev.practicelearn.co.uk
eu-central-1-san1.blackboard.com
exc-mailbox4.leedsbeckett.ac.uk
libcal.leedsbeckett.ac.uk
skyline.leedsbeckett.ac.uk
www.studygroup.com
eu-central-1-san1.blackboard.com
www.studygroup.com

Certificate

The complete raw certificate details for *.leedsbeckett.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Bb02ZdxUBCnbdeg7QR
/EWRuQnEJ1QrYTFytjR8HzLPAHN/ng/C7MDuJcdm+ksGWXNfFGawxFHK5q6yes7e
lZVcPm5jnI6fuELeF2/AYDyA0E6/AT9+YM7h9QWyPrcGh+aY/Vz1LU59bMeVG1K9
uREaPng15LXcFbKtguHAHov6iPoMGujqtpAxdWuOxmAIGFvFCRmgjtHZU34H1fa2
NfBnXoTUESBzYoZSsNuGPCIzQy4UPWNmKV+h31zqNsLVBYW59s01vrQ/yJmDO6W7
gp0axAkpxFu1+GGwK2YcAPw1EbEVtsDs5fqmrR1cfHv4LtbL0ZW5Awjvna0SigvT
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 119388232090121746196052419977410183390
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Yorkshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leeds Beckett University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.leedsbeckett.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23701418636206123464359551561983849651412050828991608368943524488743348835300403659549179025666187839442433776208524891752058842754469755156784666417417919399816165249546333930404652146569767166290909096553707106558930016215261928708716331500974676798520997606932132131351565865274043574407366316390462434753581734640858257124642761856465796360834936575907267039842942997517771083261620084738296254306442982115882120101970747619281727166176176408528913121830323963352158339693170302410035618533554657428929379429278942954205108089689587486046916868879962274583388146269447135374877412176530301072249133609610019328877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d253402a91642ad90e786a78f68e7b1bfdf9b1bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leedsbeckett.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leedsbeckett.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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