msds.open.edu

- The Open University -

Issued by GEANT EV RSA CA 4

About this certificate

This digital certificate with serial number e1:63:8c:d9:a7:f0:b0:1b:31:58:c2:90:78:f7:ca:6a was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Open University

Company registration number: RC000391
Organization: The Open University
State / Province: Buckinghamshire
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): e1:63:8c:d9:a7:f0:b0:1b:31:58:c2:90:78:f7:ca:6a
Serial Number (int): 299593193222431766642792736472140597866
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 74:dc:14:b3:0f:f9:94:c7:c2:72:bc:93:ce:ac:ae:80:fc:07:b2:65
AuthorityKeyId: b6:20:0e:ae:a3:cb:e9:55:03:06:13:66:d4:ac:be:27:90:54:60:f3

Fingerprint (sha1): 49:13:ef:6f:59:9e:40:aa:1c:db:bb:6e:09:a3:ce:53:55:5a:e8:4c
Fingerprint (sha256): 9b:d0:11:0a:02:17:e3:07:ca:2c:31:7f:8e:62:e6:52:1c:cd:95:b5:75:34:23:7e:ad:e2:fd:d9:55:87:c7:8b

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTEVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTEVRSACA4.crl

Check the revocation status for certificate msds.open.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for msds.open.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

msds.open.edu

Other certificates including the domain name open.edu

(limited to 100 certificates)

Certificate

The complete raw certificate details for msds.open.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxtRHR3vQWVrNdMkHmrN
N0sNJUEC249L+7eoT+47QWkeQ+f4INUknP3ZuJhSVcqt/fUT7tQnOgUxD5b8g8u+
rHxvq7vSqy4XZ9cq1YMfSTmvEovcfqy7wDoaQG/adpMuRCifGiQAX+cIA4LApzPG
l2ZZ57jgW4cVkf7moUfKS22ENIZuT8SvuDN7zyRH6eoXi0kspd+KwcMQeePEKdxg
2g6H1uMIPtqtmDCSAOHQ5bOACTn63K1t0XkffbCEa2BID3pkWXNWLXGj+UkxYzKb
m6h2+RhxObmz9NqUZNc6EEpXHQbUwa8rc2EF393jEeBHiip+h+kmpQcm47pMgc5X
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299593193222431766642792736472140597866
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT EV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RC000391'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Buckinghamshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Open University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'msds.open.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19580407710790141595488264272134643612603509651904805034740795945478502005483396938443878281685840946347457223193661959698462279055113820379511475575906703500578109177065747804554146091835092912024923428714705290447531868625947974807971948259666725414658827875311331701671556014156742367902737960666962415881523818729850484189662411757104864692681649333231559523647041716718199966197032044803690009938639237340407403505048812384663432565626248976403623254925684819755165309184766725400093546181562799652180343399513227825532118336738548312587671209427669770762563297052346263441114083977767155693926955984238387550083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b6200eaea3cbe95503061366d4acbe27905460f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74dc14b30ff994c7c272bc93ceacae80fc07b265
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTEVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTEVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msds.open.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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