etracker.selby.ac.uk

Issued by TERENA SSL CA 2

About this certificate

This digital certificate with serial number 80:54:a0:9c:cd:61:9c:68:74:ae:bf:15:f4:66:86:a5 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=etracker.selby.ac.uk,OU=Domain Control Validated

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 80:54:a0:9c:cd:61:9c:68:74:ae:bf:15:f4:66:86:a5
Serial Number (int): 170580594005278525178907298664936801957
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 82:7f:31:c5:27:cf:e8:58:91:b4:3c:22:0c:cf:e2:f1:18:9a:d0:d7
AuthorityKeyId: 5b:d0:8a:1c:9a:32:5b:e0:b5:dd:96:54:1b:e1:86:28:b0:fd:b6:bd

Fingerprint (sha1): a1:83:a5:63:30:4b:30:2c:7c:24:5f:09:7a:08:57:c8:31:7e:ff:e7
Fingerprint (sha256): 59:a1:5f:fe:c8:df:e9:f0:95:7a:58:81:54:44:80:3b:93:7f:68:06:50:3f:5f:f5:89:6d:3e:b7:38:01:ab:54

Issuing Certificate URL: http://crt.usertrust.com/TERENASSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TERENASSLCA2.crl

Check the revocation status for certificate etracker.selby.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for etracker.selby.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

etracker.selby.ac.uk

Other certificates including the domain name selby.ac.uk

(limited to 100 certificates)
moodle2.selby.ac.uk
moodle2.selby.ac.uk
moodle2.selby.ac.uk
moodle2.selby.ac.uk
moodle2.selby.ac.uk
selby.ac.uk
moodle2.selby.ac.uk
remote2.selby.ac.uk
mail.selby.ac.uk
moodle2.selby.ac.uk
moodle.selby.ac.uk
remote2.selby.ac.uk
selby.ac.uk
www.selby.ac.uk
remote2.selby.ac.uk
www.selby.ac.uk
www.selby.ac.uk
moodle2.selby.ac.uk
www.selby.ac.uk
selby.ac.uk
selby.ac.uk
etracker.selby.ac.uk
moodle2.selby.ac.uk
selbycp.selby.ac.uk
etracker.selby.ac.uk
selby.ac.uk
mail.selby.ac.uk
moodle2.selby.ac.uk
etracker.selby.ac.uk
selbycp.selby.ac.uk
selbycp.selby.ac.uk
selby.ac.uk
moodle2.selby.ac.uk
selby.ac.uk
selby.ac.uk
selby.ac.uk
www.selby.ac.uk
selby.ac.uk
selby.ac.uk
shibboleth.selby.ac.uk
moodle2.selby.ac.uk
selbycp.selby.ac.uk
selbycp.selby.ac.uk
selby.ac.uk
moodle2.selby.ac.uk
remote.selby.ac.uk
selby.ac.uk
www.selby.ac.uk
www.selby.ac.uk
selbycp.selby.ac.uk
selby.ac.uk
www.selby.ac.uk
selby.ac.uk
selbycp.selby.ac.uk
shibboleth.selby.ac.uk
shibboleth.selby.ac.uk
moodle2.selby.ac.uk
www.selby.ac.uk
www.selby.ac.uk
remote2.selby.ac.uk
shibboleth.selby.ac.uk
mail.selby.ac.uk
www.selby.ac.uk
remote2.selby.ac.uk
etracker.selby.ac.uk
selby.ac.uk
moodle2.selby.ac.uk
moodle2.selby.ac.uk

Certificate

The complete raw certificate details for etracker.selby.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIRAIBUoJzNYZxodK6/FfRmhqUwDQYJKoZIhvcNAQELBQAw
ZDELMAkGA1UEBhMCTkwxFjAUBgNVBAgTDU5vb3JkLUhvbGxhbmQxEjAQBgNVBAcT
CUFtc3RlcmRhbTEPMA0GA1UEChMGVEVSRU5BMRgwFgYDVQQDEw9URVJFTkEgU1NM
IENBIDIwHhcNMTQxMDEwMDAwMDAwWhcNMTcxMDA5MjM1OTU5WjBCMSEwHwYDVQQL
ExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxHTAbBgNVBAMTFGV0cmFja2VyLnNl
bGJ5LmFjLnVrMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1RhO3883
PBgsUKhIvoA0dl45SsKwY8XcYPOXDQgeefkeUq8Mx1Y+XczBvuXDgfTuWthEpQyi
LY9QYAXIZWhnNvbj2Ztx0k1fRoz5x8WXjmzQa8vxaKXLBoalmaD6xMmVy7Ty95nc
4Eibw0ku4hAXG8+pQLJ/JoZqDXoTy2FIcbwA6YJscUqsrdD4Qt/weeiCdSsbPUX9
5ddgIHyYjBB/6cNFhxk8TGff8RNv5N3LBZRFdsDqTjcPKyGr8ELuy3ktscYYWWAl
19WD4Vh95xYRZvZRpujg8Si2PM+quNDmDdWKw10c/vfO8g2K4eziDaeIHqwEh2jW
+TjlgAybjULfB3gd9qmlmxByIQ0iVrWlt4/yRyoUuTvpTQhJD3ricFAQEOY+GxVm
MvNIhSN8WT+D1FzPdY1oErV/EiDBEJP7Ut8QvqSkEbt5UY85dm4RUCKIKqPIh1L7
nlFMxtsnedDnYpy630HpgqTTkNfiLM2kQGAfUiPQT2ids5M+kZAkBKiSzt49ksrz
Vc0qTuRH+rCyU9XFBH4ONi5HmyMfELP3eWlbl7Ost9xzerwnvVY6DvLtT/WlNEh/
sI4K/Jqq39hzJ4pC8o6lW6MfSTm2ZW7QssCQAf1GK3bfTvYbrsEAkPHzqEqcMMfl
mUustg/PkUj+NEJnZMhCwHmWHEGW43GNwXUCAwEAAaOCAXAwggFsMB8GA1UdIwQY
MBaAFFvQihyaMlvgtd2WVBvhhiiw/ba9MB0GA1UdDgQWBBSCfzHFJ8/oWJG0PCIM
z+LxGJrQ1zAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwIgYDVR0gBBswGTANBgsrBgEEAbIxAQICHTAI
BgZngQwBAgEwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybC51c2VydHJ1c3Qu
Y29tL1RFUkVOQVNTTENBMi5jcmwwbAYIKwYBBQUHAQEEYDBeMDUGCCsGAQUFBzAC
hilodHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vVEVSRU5BU1NMQ0EyLmNydDAlBggr
BgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTAfBgNVHREEGDAWghRl
dHJhY2tlci5zZWxieS5hYy51azANBgkqhkiG9w0BAQsFAAOCAQEAECkuAawlo//v
zeaMIEUQQhx5At4aWKgeOxlcBuhIzZNtZKW1ZQZJf2QAsT1KTx+WNP88Le9yX+I5
B9aSKuhp46SADDMjWG8F29lReLNVMm5e1l979pMzzX9ALcDBuJ/F/yA1X03/k+xU
q5Pn/8L3b0/NhMmZgB0aLH0KkkErNC3vUcNq7+OFRblLDtfZC+bsMCLkxDLkEeY/
vv9Sd/wx6h1Llk5p5t1RllbY58cYKVW7qWp0ciOXXIQCJYVfNJdfOohKf4pCmlmp
IT+X+zBsnWnlRV953AWFMDFBMCAxGQ6ZpH6ihotIJ8tR+j/lvaL5/QsMlRnfLKUa
zN8QG0z2Xg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 170580594005278525178907298664936801957
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'etracker.selby.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 869351563075856336116961614743128364813449765326003268026654169353785460298820150620030634441429607660489186313932911544108892757890934331342408912992318699729040516180735040955765237801157543180498911843399354212876081330123267325701566197097605448332281982264082901648427243803973674677385726085822289108712395122148660787528915050926273014159334098944780244331898328272128665925003961411315749924397648279406437952885649614616217385480241033561169516525353785874584608793274241793961709229084020665890133329812106470386011507150717134505123560739089532417292078487584622112414287999812838958258369308547576096222935247207348533910118240565946368959961371514188162046695759756463998650078541816818532895307869761492976236934254208175241927206736661493140081552487832643753924454145556596205842109717076389298361629668702672781221095240090792396130510333655081877237058537826615208078760877070201395116758742918441638178934221690709505753410488233658337016944857362234681217061044238023207347765471706918109911657542006068583477893073784046563970591181989389909253679942573587378500642410639158071029732751026874247256558592695349575952973188104019593725238090034471927367909037490308131510115455453240876991591607491822075805286773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5bd08a1c9a325be0b5dd96541be18628b0fdb6bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							827f31c527cfe85891b43c220ccfe2f1189ad0d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TERENASSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TERENASSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etracker.selby.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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