plus.leedsmet.ac.uk

Issued by TERENA SSL CA

About this certificate

This digital certificate with serial number af:99:6a:3d:6e:ed:f1:eb:9b:8f:d8:86:12:65:c4:08 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=plus.leedsmet.ac.uk,OU=Domain Control Validated

TERENA

Organization: TERENA
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): af:99:6a:3d:6e:ed:f1:eb:9b:8f:d8:86:12:65:c4:08
Serial Number (int): 233411475484383015768634202750515004424
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 34:08:5e:1e:29:94:56:df:9b:3d:91:3c:0f:29:56:cf:de:43:23:46
AuthorityKeyId: 0c:bd:93:68:0c:f3:de:ab:a3:49:6b:2b:37:57:47:ea:90:e3:b9:ed

Fingerprint (sha1): ac:32:62:8e:e3:43:eb:d6:04:70:5f:a1:45:c5:38:87:f9:f7:37:d0
Fingerprint (sha256): 76:84:61:7b:17:cf:19:52:3d:4a:5e:bb:65:f9:a8:ca:0c:76:4b:3b:82:4b:4d:32:af:ac:08:58:7b:fb:c6:ea

Issuing Certificate URL: http://crt.tcs.terena.org/TERENASSLCA.crt

Revocation information

OCSP Server: http://ocsp.tcs.terena.org
CRL Distribution Point: http://crl.tcs.terena.org/TERENASSLCA.crl

Check the revocation status for certificate plus.leedsmet.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for plus.leedsmet.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

plus.leedsmet.ac.uk

Other certificates including the domain name leedsmet.ac.uk

(limited to 100 certificates)
welcome.leedsmet.ac.uk
fms.leedsmet.ac.uk
vpn-sta.leedsbeckett.ac.uk
researchethics.leedsmet.ac.uk
onlinestore.leedsmet.ac.uk
*.experience.leedsmet.ac.uk
piph.leedsmet.ac.uk
xap.leedsbeckett.ac.uk
fms.leedsbeckett.ac.uk
*.leedsmet.ac.uk
my-dev.leedsbeckett.ac.uk
xap.leedsmet.ac.uk
webresources.leedsmet.ac.uk
vhd.leedsmet.ac.uk
www.leedsbeckett.ac.uk
i-print.leedsbeckett.ac.uk
netstorage.leedsmet.ac.uk
registration.leedsmet.ac.uk
pams.leedsmet.ac.uk
vts.leedsbeckett.ac.uk
uniquetopup.leedsmet.ac.uk
owa2k3.leedsmet.ac.uk
researchonline.leedsmet.ac.uk
onlinestore.leedsmet.ac.uk
aua.leedsmet.ac.uk
webfiles.leedsbeckett.ac.uk
confirmation.leedsmet.ac.uk
my.leedsbeckett.ac.uk
i-print.leedsmet.ac.uk
onlinestore.leedsmet.ac.uk
webresources.leedsbeckett.ac.uk
welcome.leedsbeckett.ac.uk
i-print.leedsbeckett.ac.uk
vacancies.leedsbeckett.ac.uk
peopledevelopment.leedsbeckett.ac.uk
*.ezproxy.leedsmet.ac.uk
replay.leedsbeckett.ac.uk
library-rfid.leedsbeckett.ac.uk
webfiles.leedsmet.ac.uk
experience.leedsmet.ac.uk
www.wellmetshortstay.com
registration.leedsbeckett.ac.uk
applyonline.leedsmet.ac.uk
www.leedsmet.ac.uk
uniquetopup.leedsmet.ac.uk
applyonline.leedsbeckett.ac.uk
owa2k3.leedsmet.ac.uk
replay.leedsbeckett.ac.uk
owa2k3.leedsmet.ac.uk
applyonline.leedsmet.ac.uk
itbm-web1.leedsmet.ac.uk
www-train.practicelearn.co.uk
registration.leedsbeckett.ac.uk
e-pay.leedsbeckett.ac.uk
enterpriseacademy.leedsmet.ac.uk
www.leedsmet.ac.uk
www.wellmetshortstay.com
luminis.leedsmet.ac.uk
accommodation.leedsmet.ac.uk
experience.leedsmet.ac.uk
piph.leedsmet.ac.uk
citrix-store.leedsbeckett.ac.uk
repository.leedsmet.ac.uk
userid.leedsmet.ac.uk
datacap.leedsmet.ac.uk
jobsonline.leedsmet.ac.uk
www.leedsmet.ac.uk
www.practicelearn.co.uk
resultsonline.leedsmet.ac.uk
owa2k3.leedsmet.ac.uk
resultsonline.leedsbeckett.ac.uk
selfservice.leedsbeckett.ac.uk
selfservice.leedsbeckett.ac.uk
userid.leedsmet.ac.uk
apps.leedsmet.ac.uk
nagios-prod.leedsmet.ac.uk
apps.leedsmet.ac.uk
my.leedsmet.ac.uk
my.leedsbeckett.ac.uk
apps.leedsbeckett.ac.uk
vpn-stu.leedsmet.ac.uk
pm.leedsbeckett.ac.uk
placementsonline.leedsmet.ac.uk
enterpriseacademy.leedsbeckett.ac.uk
www-dev.practicelearn.co.uk
pm.leedsmet.ac.uk
xap.leedsmet.ac.uk
plus.leedsmet.ac.uk
placementsonline.leedsbeckett.ac.uk
lmu-agrwebpay.leedsmet.ac.uk
hy-rmapp1.leedsmet.ac.uk
ezproxy.leedsmet.ac.uk
uniquetopup.leedsbeckett.ac.uk
replay.leedsmet.ac.uk
payments.leedsmet.ac.uk
meti.leedsbeckett.ac.uk
webfiles.leedsbeckett.ac.uk
onlinestore.leedsmet.ac.uk
ovp.leedsbeckett.ac.uk
owa2k7.leedsmet.ac.uk

Certificate

The complete raw certificate details for plus.leedsmet.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iJu0sBXTtt21OOpf7p0
uTHlm9EoYYFSjuTIP8TyBSQ4NM1WecMQi4uqucwN85nPrP8nTtB63lopWkwS+Vb5
+TcvW5sWZ54Yrc35kqFS7emANpHZf7SxVNJ+W9eUOSq+QX7U0qhsaIxugvw1kNTy
6NaPMVqIz2Q52+xFSbsWoEN0sCf1CnodGS212cWlrAR0hpHzGvFaezLSFQ7w3N1h
MBK3yDkEa+r+ZmVBDw6HsdkwGcjKWIXmJKeUqpYLEImwUQe7ymtKG1fG99fdYvVs
qgQJ609qf9QjP+H5RBMdjrvHP3Dy/tv2NeuTpCx/8LUO1thZFGzLooKmssw0F15d
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 233411475484383015768634202750515004424
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'plus.leedsmet.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26527023540329068899372619747559696265641348145304496785232712380883194496826025093648071964859313568744776828894872265415422585932787849811646053039037971008800976602490120403980217258040328566834345792804482034503515345038602584784732476189883907729618526228014999858173307631174143295713607191204799037307174898875736441704055393358614956020273149486200652311735697937539560331505482607269539961569792685522205553469117985842542531281795144308628250188804163618956129585404699253278366854964599588817623685553358177994593062590024750125064752356204187097548471705835336664650691110159046510939182240937500517227891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cbd93680cf3deaba3496b2b375747ea90e3b9ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							34085e1e299456df9b3d913c0f2956cfde432346
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.tcs.terena.org/TERENASSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.tcs.terena.org/TERENASSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tcs.terena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plus.leedsmet.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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