brainbanknetwork.ac.uk

- University of Bristol -

Issued by QuoVadis Europe EV SSL CA G1

About this certificate

This digital certificate with serial number 59:b9:95:04:ae:19:8a:53:61:ef:c3:98:40:54:aa:0c:7a:64:68:17 was issued on by QuoVadis Trustlink B.V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Bristol

Company registration number: 1909-05-17
Organization: University of Bristol
State / Province: Bristol
Locality: Bristol
Country: GB

QuoVadis Trustlink B.V.

Organization: QuoVadis Trustlink B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 59:b9:95:04:ae:19:8a:53:61:ef:c3:98:40:54:aa:0c:7a:64:68:17
Serial Number (int): 512238797788201467165249541902981882117198473239
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: c9:08:48:10:ee:7c:c7:69:68:4e:ab:a0:f4:1c:ec:d9:4c:fb:f4:46
AuthorityKeyId: 49:3d:0e:dc:79:c5:cb:db:12:a3:d5:0d:ab:f2:cf:a9:af:e3:66:a9

Fingerprint (sha1): 31:13:6a:27:11:24:57:0a:90:79:a0:ad:d5:9b:d0:ce:bb:b6:e0:54
Fingerprint (sha256): a3:b0:a3:6a:58:aa:56:ee:fa:6b:d6:79:7f:c2:37:41:83:9c:02:8d:9a:b0:23:10:fa:51:05:fe:74:f4:21:9d

Issuing Certificate URL: http://trust.quovadisglobal.com/quovadiseuropeevsslcag1.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/quovadiseuropeevsslcag1.crl

Check the revocation status for certificate brainbanknetwork.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brainbanknetwork.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brainbanknetwork.ac.uk
brainbanknetwork.cse.bris.ac.uk

Other certificates including the domain name brainbanknetwork.ac.uk

(limited to 100 certificates)
brainbanknetwork.ac.uk
brainbanknetwork.ac.uk
brainbanknetwork.ac.uk
brainbanknetwork.ac.uk
brainbanknetwork.ac.uk

Certificate

The complete raw certificate details for brainbanknetwork.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjPekRXuWi2tky0qaJtE
HO53fqwD/ZoS6qg5U06pIUetOauU38K9h+haf2MrDumQ3WulpKqUh9fHiE8YcM5E
JmXlUoG+02P1scebbhEhdKxN95AqFnBJX+tP4YfjvDOXC8YtZRpsV76CC8Uqw0nM
x7PY/PV8Brnn38cRo+dcHlKtSnD4DNqVXVUA7mDg1hYPBhNwT2Cfr7VQ3F3oNSkn
4IZSB7DFovPrN9CKQ5nHGjXQKEQZDDkCay1vdlPDGzawjEqWYMIPZq8vZGXJk1R0
n5fSaBw+G03ot/LDXQ3k+2a9sjWEdOzYbImvP0R+L8rjwFtT3AxsurIYzdYd9EY1
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 512238797788201467165249541902981882117198473239
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Europe EV SSL CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-14 13:24:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-14 13:34:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1909-05-17'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bristol'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bristol'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Bristol'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'brainbanknetwork.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21486089599322568641674949277771716826448476462321497809873923376710933440235093582200751848198143532286542464677107238945032912708508835988043144561200563644577988465075539058082723035817967061891910561802313497633483462158565281084270645584850283357913912050452815533912422045174752978190345013494744892993638420288076122932193299295577498375287174628855382261964183754525852087315573142065605988674234254309833052082312931665596523732700099802801119260383979025572819841819536474270719096957722658996444054102727716304187652926061655581957753503966445238794333388995712337027105827410743177063302771529381698745663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 493d0edc79c5cbdb12a3d50dabf2cfa9afe366a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/quovadiseuropeevsslcag1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainbanknetwork.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainbanknetwork.cse.bris.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/quovadiseuropeevsslcag1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9084810ee7cc769684eaba0f41cecd94cfbf446
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001766175c5a40000040300463044022003dc5242abc2593249e8ea20c245f8dff2b637037be26502f325b3b333c271fc0220494ad031a9c4d3d3f73cdc15fe60fce8b5c6f4b184dd2f91aa3cf04cc94ebd8a007600eec095ee8d72640f92e3c3b91bc712a3696a097b4b6a1a1438e647b2cbedc5f9000001766175c635000004030047304502205a525c53c9ff99e9b2d7231422085ad38a34d95904d88a1410279f4475c42c13022100ac1c06c641eac5784914ff29e7c525610cb514154fe44db829a66aeb50060f4e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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