crm.dcc.ac.uk

Issued by TERENA SSL CA

About this certificate

This digital certificate with serial number 68:35:b9:53:10:df:ad:32:9b:d3:6b:40:13:5e:f4:36 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=crm.dcc.ac.uk,OU=Domain Control Validated

TERENA

Organization: TERENA
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 68:35:b9:53:10:df:ad:32:9b:d3:6b:40:13:5e:f4:36
Serial Number (int): 138518662122069929407159260838807663670
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 9f:1d:11:f4:b3:63:dd:a1:52:91:b4:52:e1:b9:bb:43:11:98:22:75
AuthorityKeyId: 0c:bd:93:68:0c:f3:de:ab:a3:49:6b:2b:37:57:47:ea:90:e3:b9:ed

Fingerprint (sha1): 37:67:dd:a7:a6:ca:80:b1:55:ae:1f:02:27:ae:8b:34:1e:fc:4f:42
Fingerprint (sha256): 70:98:1a:06:da:e1:39:d6:1b:59:aa:1c:ae:a3:a4:64:75:66:d6:d1:36:ca:97:e1:0c:05:a2:5e:88:0a:82:95

Issuing Certificate URL: http://crt.tcs.terena.org/TERENASSLCA.crt

Revocation information

OCSP Server: http://ocsp.tcs.terena.org
CRL Distribution Point: http://crl.tcs.terena.org/TERENASSLCA.crl

Check the revocation status for certificate crm.dcc.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crm.dcc.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crm.dcc.ac.uk

Other certificates including the domain name dcc.ac.uk

(limited to 100 certificates)
dcc.ac.uk
baap.ac.uk
dmponline.dcc.ac.uk
baap.ac.uk
rdamsc.dcc.ac.uk
dcc.ac.uk
dmponline-test.dcc.ac.uk
baap.ac.uk
dmponline-dev.dcc.ac.uk
dmponline-test.dcc.ac.uk
dcc.ac.uk
dmponline.dcc.ac.uk
dcc.ac.uk
dmponline3.dcc.ac.uk
dmponline.dcc.ac.uk
dmponline.dcc.ac.uk
dmponline3.dcc.ac.uk
dmponline.dcc.ac.uk
dmponline-dev.dcc.ac.uk
dmponline-test.dcc.ac.uk
dmponline.dcc.ac.uk
www.dcc.ac.uk
dmponline.dcc.ac.uk
baap.ac.uk
dmponline.dcc.ac.uk
baap.ac.uk
dcc.ac.uk
dmptuuli-test.dcc.ac.uk
www.dcc.ac.uk
translate.dcc.ac.uk
dcc.ac.uk
dmponline.dcc.ac.uk
crm-test.dcc.ac.uk
baap.ac.uk
dcc.ac.uk
dcc.ac.uk
dmponline.dcc.ac.uk
dcc.ac.uk
dmponline-test.dcc.ac.uk
dmponline.dcc.ac.uk
dcc.ac.uk
dmponline.dcc.ac.uk
dcc.ac.uk
crm.dcc.ac.uk
dcc.ac.uk
dcc.ac.uk
dcc.ac.uk
baap.ac.uk
dmponline-lb.dcc.ac.uk
dmponline-test.dcc.ac.uk
dmponline.dcc.ac.uk
baap.ac.uk
dcc.ac.uk
dmponline.dcc.ac.uk
baap.ac.uk
dcc.ac.uk
dcc.ac.uk
dmponline-dev.dcc.ac.uk
dcc.ac.uk
dmponline-lb.dcc.ac.uk
dmponline.dcc.ac.uk
dcc.ac.uk
baap.ac.uk
dmponline.dcc.ac.uk
dcc.ac.uk
baap.ac.uk
dmponline.dcc.ac.uk
dcc.ac.uk
dmponline.dcc.ac.uk
dcc.ac.uk
dmponline.dcc.ac.uk
dmponline-lb.dcc.ac.uk
baap.ac.uk
dcc.ac.uk
crm.dcc.ac.uk
dmponline-lb.dcc.ac.uk
dmponline.dcc.ac.uk

Certificate

The complete raw certificate details for crm.dcc.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjEjS5H/0cru981z+Jcb
bH602UQCkBCwC3pG/qEr9N7DMFfVvHhvx4HJ1u2j9JG8qPmUBcTijA8h2lJN30ta
ziRYbzCCZ8i4xZwZTCk2/tIRuy5az7WpN+PFHQ0qbGogwFBA7WMzEM4WnmDC9sbn
DadQ8wZwbgTTgGgSxHA4YAqd+DBVGk09g89EiFKO9ZKIKPcQI46HoKy3wHO44PqJ
kpDANx2HJX2DJWtKaYQk3yxWH6l1TgoEKT1AZzLBizK0FoCf7bHiTZvoYR78sxiU
tsf5r8vQzh2GmAuQ9RQK+BGVWXwuBAo4BzeCram+Yl0pXuLpjiDRbyirrCtohx7e
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 138518662122069929407159260838807663670
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crm.dcc.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26029321610716765712095942974143405332956745253934462242764603472320597788482052858698250931029652225282334405110541252866734999767968848360468976975987083938683184448348801902656662467942414425107986134070400081593333980150822058935322411445610368089862098522161067876181480554197007908042285312047182519856161794398772653123891023371337560421155921374033110765593862327684078855069543161134078534364890861343923178696204698191011497735588248191080909346784886254054553553972818345530965663914243170396136850931350189875747297029997657964226846923795579404357325946719039474612203431960581087269921486581406810168931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cbd93680cf3deaba3496b2b375747ea90e3b9ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f1d11f4b363dda15291b452e1b9bb4311982275
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.tcs.terena.org/TERENASSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.tcs.terena.org/TERENASSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tcs.terena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.dcc.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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