www.greenhead.ac.uk

- Greenhead College -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 61:37:e6:23:1a:b5:10:89:98:79:20:b8:09:b6:d3:0c:11:77:17:6a was issued on by QuoVadis Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Greenhead College

Organization: Greenhead College
Organization unit: Network Management
State / Province: West Yorkshire
Locality: HUDDERSFIELD
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 61:37:e6:23:1a:b5:10:89:98:79:20:b8:09:b6:d3:0c:11:77:17:6a
Serial Number (int): 555018693526978834254777060771246813106331391850
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 9c:d5:c2:ac:a4:e8:fb:7f:d9:69:04:d9:65:36:5a:28:1c:ed:3b:75
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): da:86:e1:b6:31:30:e3:5b:6b:00:a3:bd:9b:c6:85:af:ad:b7:60:7b
Fingerprint (sha256): 87:65:e7:e2:2b:56:dc:fb:b7:ad:ca:cb:7f:83:54:c3:4a:9b:bb:6e:34:98:ac:ea:2f:36:3e:2f:23:80:47:de

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate www.greenhead.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.greenhead.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.greenhead.ac.uk
greenhead.ac.uk

Other certificates including the domain name greenhead.ac.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.greenhead.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35HxQ9IC8tqXiK1LAIOS
KlLwcsgOP+d4QIcHrQmWccYubwaqr1a2a7APf0PdHY/iAo3llPKHcngMi3MozFJO
Dn0QmT0c8u6DvQ6OZfXMnHwqHPd+ckPw2rYQgdz7baiSna7glYVmSLM9wsKByVgw
PqCf0ZAzMskGoo7rJSPrsWcs6TYPN/G9iCjK4qV7/c34iVi3w5AVwBxrcEcacvZP
YDczkmIBN5xHyYAyLoqcSKk3Q0F7wGoLhXbrM41Fy+aKWWDPrCsditrqE3YpAW3G
Cpa8uWl1KLuYwL3wXTYr/EuLkRH9ijFue8VFCYNUaYEGl6SHqDoYoiCvxfGJsWDw
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 555018693526978834254777060771246813106331391850
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-13 08:48:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-13 08:58:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'West Yorkshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HUDDERSFIELD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Greenhead College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Network Management'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.greenhead.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28223108907383795710271490537505042484086612615121286398531911783844195295694630560103378488626883451416556712268474706491481931525168172982969799586486048108696507877779609569402095057238976724955350101999447345973652697888978833152049268847435500935250152584981143859077185070681083833681164594715531706905341821096045741151077260053997063932913558565270020565070370792879379751385482088380735721148521754365477466304488808738182716404214309512927825664099504164651377023494466689310996184903791858205735514265873852752319052131424304408643988089208289474468469245555439982341820167553730454821382723927799916195991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenhead.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenhead.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9cd5c2aca4e8fb7fd96904d965365a281ced3b75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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