canmail.libf.ac.uk

- The London Institute of Banking & Finance -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 71:6f:a7:f5:86:34:e9:48:44:92:f9:5c:da:b3:e8:a6:a0:f3:01:69 was issued on by QuoVadis Limited.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The London Institute of Banking & Finance

Organization: The London Institute of Banking & Finance
Organization unit: IT
State / Province: Greater London
Locality: LONDON
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 71:6f:a7:f5:86:34:e9:48:44:92:f9:5c:da:b3:e8:a6:a0:f3:01:69
Serial Number (int): 647605971119452547397079808929095417020544123241
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 7e:01:fc:82:0c:c6:6c:db:10:50:cc:92:fd:de:55:94:40:7b:b1:27
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 10:dd:9a:ef:36:1b:71:a5:50:11:56:59:4e:3b:bf:b2:73:45:0a:17
Fingerprint (sha256): 84:e4:b7:23:0a:ef:45:f5:6c:94:df:5e:53:28:6b:06:f8:76:ea:9b:fd:81:d4:95:af:84:19:40:ed:9b:df:51

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate canmail.libf.ac.uk

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canmail.libf.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canmail.libf.ac.uk
autodiscover.ifslearning.com
autodiscover.libf.ac.uk
libf.ac.uk
canexch.ifslearning.com

Other certificates including the domain name libf.ac.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for canmail.libf.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxDlAv04GLuerxP+DtOt
qXzM5RpQ/R2pzYYnC4GS0klvPNuKMXYDZYvnINm/24IjVkUJQpp+PDxBpAkw9wl8
z/6QUn5s8A9KUmuW2i2GYJsVTz6GfTHonZ5kXpxTmZ9f/1XtJVa4YH+MAULuq5ef
zRrINDpdIfJ8j1is1qIVJxmWYIG4sURNMUwmKllBoxfkJuf63cRjoWrjrer6LklI
ajd5kjVuRa/Xf3QyuHLdbmM/Oj1gMdky8ZDCoo9YBemVbEOSKSBMs+KW9NkDOBmE
xQ2LBL4YOwiBPrLGC1Q2Bq4q4JsJ5jGHVTQc6LKpU1pYlW2CTnUbttBUry3X19Qe
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 647605971119452547397079808929095417020544123241
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 10:30:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-15 10:40:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Greater London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LONDON'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'The London Institute of Banking & Finance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'canmail.libf.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23614894055004535570003737061741152532234324762929466075332568952980305553237123339281266947009222700833337570556029289592537117791786036508844386368332542991866300151637688912378988529384343072523885651973050980641543399319049012356518535619178471791314395901238259092371013135199224083806369007285199357466539696599579746257340544096310365082704900978786693348032239071095643480284909116319818285643101947505903804373092898923429661042171379246728072196243651088174555056321919636532954590606383951863539841427691381777991454488336924470363157826770062177331832965491612979580390630553586871463083845883779528007193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canmail.libf.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ifslearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.libf.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libf.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canexch.ifslearning.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e01fc820cc66cdb1050cc92fdde5594407bb127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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