etracker.selby.ac.uk

- Selby College -

Issued by TERENA SSL CA

About this certificate

This digital certificate with serial number 40:67:0e:d5:76:07:5a:28:c3:ec:f8:fc:64:82:d3:5f was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Selby College

Organization: Selby College
Organization unit: Selby College
State / Province: North Yorkshire
Locality: Selby
Country: GB

TERENA

Organization: TERENA
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 40:67:0e:d5:76:07:5a:28:c3:ec:f8:fc:64:82:d3:5f
Serial Number (int): 85605699172524889177899310091230958431
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 32:57:d7:43:cb:e5:47:da:fd:33:a2:a1:bd:2f:1b:0a:60:11:bf:1f
AuthorityKeyId: 0c:bd:93:68:0c:f3:de:ab:a3:49:6b:2b:37:57:47:ea:90:e3:b9:ed

Fingerprint (sha1): f2:10:c0:26:d4:66:39:d7:e0:ba:15:40:27:55:45:ce:53:3b:e1:de
Fingerprint (sha256): 61:78:84:ae:c4:fe:b8:c3:27:6d:9a:6f:84:21:74:c8:89:e6:bb:5a:c1:07:58:57:c2:e0:ad:5d:a4:16:46:b6

Issuing Certificate URL: http://crt.tcs.terena.org/TERENASSLCA.crt

Revocation information

OCSP Server: http://ocsp.tcs.terena.org
CRL Distribution Point: http://crl.tcs.terena.org/TERENASSLCA.crl

Check the revocation status for certificate etracker.selby.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for etracker.selby.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

etracker.selby.ac.uk

Other certificates including the domain name selby.ac.uk

(limited to 100 certificates)
moodle2.selby.ac.uk
moodle2.selby.ac.uk
moodle2.selby.ac.uk
moodle2.selby.ac.uk
moodle2.selby.ac.uk
selby.ac.uk
moodle2.selby.ac.uk
remote2.selby.ac.uk
mail.selby.ac.uk
moodle2.selby.ac.uk
moodle.selby.ac.uk
remote2.selby.ac.uk
selby.ac.uk
www.selby.ac.uk
remote2.selby.ac.uk
www.selby.ac.uk
www.selby.ac.uk
moodle2.selby.ac.uk
selby.ac.uk
selby.ac.uk
etracker.selby.ac.uk
moodle2.selby.ac.uk
selbycp.selby.ac.uk
etracker.selby.ac.uk
selby.ac.uk
mail.selby.ac.uk
moodle2.selby.ac.uk
etracker.selby.ac.uk
selbycp.selby.ac.uk
selbycp.selby.ac.uk
selby.ac.uk
moodle2.selby.ac.uk
selby.ac.uk
selby.ac.uk
selby.ac.uk
www.selby.ac.uk
selby.ac.uk
selby.ac.uk
shibboleth.selby.ac.uk
moodle2.selby.ac.uk
selbycp.selby.ac.uk
selbycp.selby.ac.uk
selby.ac.uk
moodle2.selby.ac.uk
remote.selby.ac.uk
selby.ac.uk
www.selby.ac.uk
www.selby.ac.uk
selbycp.selby.ac.uk
selby.ac.uk
www.selby.ac.uk
selby.ac.uk
selbycp.selby.ac.uk
shibboleth.selby.ac.uk
shibboleth.selby.ac.uk
moodle2.selby.ac.uk
www.selby.ac.uk
www.selby.ac.uk
remote2.selby.ac.uk
shibboleth.selby.ac.uk
mail.selby.ac.uk
www.selby.ac.uk
remote2.selby.ac.uk
etracker.selby.ac.uk
selby.ac.uk
moodle2.selby.ac.uk
moodle2.selby.ac.uk

Certificate

The complete raw certificate details for etracker.selby.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85605699172524889177899310091230958431
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-10-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Yorkshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Selby'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Selby College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Selby College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'etracker.selby.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 639991668484410728790709754367423511003791161226720457517697010550507578070787336070205547648051150068706441731250303116702486464763751311447082770722056701678283700618258582916543441228912533536698039199412631615903969056600958856488438743771234902839141551622119727545403367453237116916779856670962723595706197686095799209217413731505547057846772023496454472885258400405585803635057118369987873815206236682261289981821134334682918469010742353333687303671487927983764925026268580987245977338001204256249347113666150553464906910262064737629671024450728830911620190071881347587196756069269990599975888238254482725549072295848237224383640734209195302222631850745071182990502329681175083100904950855445178227573370498289842512015680164321762670942410237290341957156079947183750345439083481966110364310999653187129689506147746615389064220693052743923250887581141743912314965812302536570137899463597862267264861524465554760981230989172971858895654465325373019889553277600643129163931858665987253736698418453465546516328041023000533616897624870512902346402648557735040012070027339306090233514931466933567423136652680064545802142707014373749645228745479480011998646674005366488069180719445983211066944461282128965371249961612277282008964447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cbd93680cf3deaba3496b2b375747ea90e3b9ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3257d743cbe547dafd33a2a1bd2f1b0a6011bf1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.tcs.terena.org/TERENASSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.tcs.terena.org/TERENASSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tcs.terena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etracker.selby.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00420af5f7f633fa3ab8d318866556824580fb1967403178421b6ba8062909a95834adddd9ca9439768a2f24bbfea5dcd9e3169a662c6d92a6992ab54b996fc0e1c56c8a2fc757e798615a587de4e291480f79bfc953d4e81cadcfc8a70ba375477ba7d8b11292b40138d3b5abc4ee570fcec43540726035e646860e42496cc17d7bc3992ba25f713d62ee6ce70f68177ade9b524b1cfa2d4db380fc86be6a0f1abe9ab8bee24ed2341a3798e1dee95b7838800bdb9dd0599d742011701b028888766b00465f03ab8730889c05dc270f3f2c35ac56d5fd2086c602c4bf8a9ca18971b493244d994f80e1a29fe3605bbc991caaeafdecf95909d6499d9ed5c439e3