www.open.edu

- The Open University -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number aa:96:ed:8c:51:92:2d:78:c3:b2:73:18:bf:7e:c8:86 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Open University

Organization: The Open University
State / Province: Buckinghamshire
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): aa:96:ed:8c:51:92:2d:78:c3:b2:73:18:bf:7e:c8:86
Serial Number (int): 226752421860479743680219677630524213382
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 49:0f:6d:c7:37:ee:60:e0:4e:30:0a:b1:d2:f5:a2:35:01:01:e2:6c
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): d1:33:4b:30:3d:56:33:64:b2:6d:9e:ac:a5:4c:79:40:8a:5a:a0:97
Fingerprint (sha256): 9c:5a:21:9f:98:22:65:86:4e:be:01:bf:fe:87:c1:82:d8:aa:34:0d:14:9c:21:a0:be:bb:ca:e4:a1:74:df:36

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.open.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.open.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.open.edu
open.edu

Other certificates including the domain name open.edu

(limited to 100 certificates)
player.open.edu
www-dev.open.edu
msds-acct.open.edu
www-internal.open.edu
www-internal.open.edu
openlearncreatelive.open.edu
www.open.edu
olclive-internal.open.edu
msds.open.edu
open.ac.uk
www-syst-external.open.edu
www.open.edu
stadium.open.ac.uk
olcsyst.open.edu
www-dev.open.edu
msds.open.edu
player.open.edu
msds.open.edu
www-nft-internal.open.edu
www-test.open.edu
www.open.edu
www.open.edu
www.open.edu
stadium.open.ac.uk
www-acct.open.edu
stadium.open.ac.uk
msds.open.edu
www.open.edu
msds.open.edu
stadium.open.ac.uk
stadium.open.ac.uk
msds-acct.open.edu
stadium.open.ac.uk
www-internal.open.edu
msds-test.open.edu
olcsyst-internal.open.edu
msds.open.edu
msds.open.edu
www.open.edu
player.open.edu
stadium.open.ac.uk
cdn-nft.open.edu
www-nft.open.edu
openlearnacct-internal.open.edu
msds-acct.open.edu
stadium.open.ac.uk
openlearncreateacct-internal.open.edu
player.open.edu
msds-acct.open.edu
open.ac.uk
www-syst.open.edu
www-syst.open.edu
www.open.edu
stadium.open.ac.uk
www-syst-internal.open.edu
stadium.open.ac.uk
msds.open.edu
stadium.open.ac.uk
msds-acct.open.edu
www-acct.open.edu
www.open.edu
openlearnacct-internal.open.edu
www-test.open.edu
player.open.edu
player.open.edu
msds.open.edu
msds.open.edu
www.open.edu

Certificate

The complete raw certificate details for www.open.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 226752421860479743680219677630524213382
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Buckinghamshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Open University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.open.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 715930952021381767132996454502893494569808618868161866612694626858196540730587118826872073573534578717466464491780689069582514760204545093614112968758176351823287344007544289458151182975568130159350394726836727893489811979410669995727674639203752912228224245804301595981952396539077407134032045133008763703965156963968077171343281064969508032989864643980823139292094014294094827951444817784232984539569506914532049942514954926168545563691170373469432836809404618295581069989697505861462419084982341643622413532936682596744780088912616062758994709296307400993237467976769486589683579104605732502218864194953011129373506269924205322719888736410507984972192095742828424781435506045071514275296753654473110223648697867951245099347190697598899548641673274327779102559835708483278157109033616876036594338252624521588508537304185626526525983071310264895821147012282456272531936922621913265330135018360795711834149497872868456391009348609724267389052229683316166087696204140457138857950755380471751215850209326625012426367148669215208854195649869952353232594233193178641016162580781093862773066115797904683248893898671332032434477658729918992819821759509140467009882043507754164275526305478867257967274697115978184112475379137867758634571863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							490f6dc737ee60e04e300ab1d2f5a2350101e26c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.open.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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