www.open.edu

- The Open University -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 3b:4b:75:23:16:da:c9:d6:15:20:68:01:ec:5a:e8:c6 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Open University

Organization: The Open University
State / Province: Buckinghamshire
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 3b:4b:75:23:16:da:c9:d6:15:20:68:01:ec:5a:e8:c6
Serial Number (int): 78816249837682633007690021659754555590
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 49:0f:6d:c7:37:ee:60:e0:4e:30:0a:b1:d2:f5:a2:35:01:01:e2:6c
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 43:71:d3:69:8b:92:aa:ce:f6:02:16:53:be:68:56:c8:b6:3e:2e:5b
Fingerprint (sha256): 5d:50:44:07:f6:7c:d5:d4:06:38:70:b6:41:52:69:90:9d:c7:df:48:1b:8c:07:e6:2e:23:7f:0b:e4:ae:07:61

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.open.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.open.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.open.edu
open.edu

Other certificates including the domain name open.edu

(limited to 100 certificates)
player.open.edu
www-dev.open.edu
msds-acct.open.edu
www-internal.open.edu
www-internal.open.edu
openlearncreatelive.open.edu
www.open.edu
olclive-internal.open.edu
msds.open.edu
open.ac.uk
www-syst-external.open.edu
www.open.edu
stadium.open.ac.uk
olcsyst.open.edu
www-dev.open.edu
msds.open.edu
player.open.edu
msds.open.edu
www-nft-internal.open.edu
www-test.open.edu
www.open.edu
www.open.edu
www.open.edu
stadium.open.ac.uk
www-acct.open.edu
stadium.open.ac.uk
msds.open.edu
www.open.edu
msds.open.edu
stadium.open.ac.uk
stadium.open.ac.uk
msds-acct.open.edu
stadium.open.ac.uk
www-internal.open.edu
msds-test.open.edu
olcsyst-internal.open.edu
msds.open.edu
msds.open.edu
www.open.edu
player.open.edu
stadium.open.ac.uk
cdn-nft.open.edu
www-nft.open.edu
openlearnacct-internal.open.edu
msds-acct.open.edu
stadium.open.ac.uk
openlearncreateacct-internal.open.edu
player.open.edu
msds-acct.open.edu
open.ac.uk
www-syst.open.edu
www-syst.open.edu
www.open.edu
stadium.open.ac.uk
www-syst-internal.open.edu
stadium.open.ac.uk
msds.open.edu
stadium.open.ac.uk
msds-acct.open.edu
www-acct.open.edu
www.open.edu
openlearnacct-internal.open.edu
www-test.open.edu
player.open.edu
player.open.edu
msds.open.edu
msds.open.edu
www.open.edu

Certificate

The complete raw certificate details for www.open.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 78816249837682633007690021659754555590
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Buckinghamshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Open University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.open.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 715930952021381767132996454502893494569808618868161866612694626858196540730587118826872073573534578717466464491780689069582514760204545093614112968758176351823287344007544289458151182975568130159350394726836727893489811979410669995727674639203752912228224245804301595981952396539077407134032045133008763703965156963968077171343281064969508032989864643980823139292094014294094827951444817784232984539569506914532049942514954926168545563691170373469432836809404618295581069989697505861462419084982341643622413532936682596744780088912616062758994709296307400993237467976769486589683579104605732502218864194953011129373506269924205322719888736410507984972192095742828424781435506045071514275296753654473110223648697867951245099347190697598899548641673274327779102559835708483278157109033616876036594338252624521588508537304185626526525983071310264895821147012282456272531936922621913265330135018360795711834149497872868456391009348609724267389052229683316166087696204140457138857950755380471751215850209326625012426367148669215208854195649869952353232594233193178641016162580781093862773066115797904683248893898671332032434477658729918992819821759509140467009882043507754164275526305478867257967274697115978184112475379137867758634571863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							490f6dc737ee60e04e300ab1d2f5a2350101e26c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.open.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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