shibboleth.selby.ac.uk

- Selby College -

Issued by QuoVadis Global SSL ICA G2

About this certificate

This digital certificate with serial number 29:11:18:8f:40:44:55:d5:f4:ce:39:8d:67:88:30:64:62:14:5a:5c was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Selby College

Organization: Selby College
Organization unit: Network Services
State / Province: North Yorkshire
Locality: SELBY
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 29:11:18:8f:40:44:55:d5:f4:ce:39:8d:67:88:30:64:62:14:5a:5c
Serial Number (int): 234449873712818681899878363409972330920766888540
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 75:b6:e0:e0:2a:8c:33:7b:f5:1c:9c:d9:c3:0f:64:4f:29:ac:0a:e4
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27

Fingerprint (sha1): 7d:0a:55:d3:7a:c9:ab:bd:df:db:b3:e6:ef:03:e7:e6:c1:2f:07:ef
Fingerprint (sha256): ad:bc:a0:ff:bc:f7:4b:bc:05:cd:a5:69:c0:1f:72:ca:50:9e:9f:88:87:e7:33:29:60:1c:98:ec:45:7e:6e:10

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl

Check the revocation status for certificate shibboleth.selby.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shibboleth.selby.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shibboleth.selby.ac.uk

Other certificates including the domain name selby.ac.uk

(limited to 100 certificates)
moodle2.selby.ac.uk
moodle2.selby.ac.uk
moodle2.selby.ac.uk
moodle2.selby.ac.uk
moodle2.selby.ac.uk
selby.ac.uk
moodle2.selby.ac.uk
remote2.selby.ac.uk
mail.selby.ac.uk
moodle2.selby.ac.uk
moodle.selby.ac.uk
remote2.selby.ac.uk
selby.ac.uk
www.selby.ac.uk
remote2.selby.ac.uk
www.selby.ac.uk
www.selby.ac.uk
moodle2.selby.ac.uk
www.selby.ac.uk
selby.ac.uk
selby.ac.uk
etracker.selby.ac.uk
moodle2.selby.ac.uk
selbycp.selby.ac.uk
etracker.selby.ac.uk
selby.ac.uk
mail.selby.ac.uk
moodle2.selby.ac.uk
etracker.selby.ac.uk
selbycp.selby.ac.uk
selbycp.selby.ac.uk
selby.ac.uk
moodle2.selby.ac.uk
selby.ac.uk
selby.ac.uk
selby.ac.uk
www.selby.ac.uk
selby.ac.uk
selby.ac.uk
shibboleth.selby.ac.uk
moodle2.selby.ac.uk
selbycp.selby.ac.uk
selbycp.selby.ac.uk
selby.ac.uk
moodle2.selby.ac.uk
remote.selby.ac.uk
selby.ac.uk
www.selby.ac.uk
www.selby.ac.uk
selbycp.selby.ac.uk
selby.ac.uk
www.selby.ac.uk
selby.ac.uk
selbycp.selby.ac.uk
shibboleth.selby.ac.uk
shibboleth.selby.ac.uk
moodle2.selby.ac.uk
www.selby.ac.uk
www.selby.ac.uk
remote2.selby.ac.uk
shibboleth.selby.ac.uk
mail.selby.ac.uk
www.selby.ac.uk
remote2.selby.ac.uk
etracker.selby.ac.uk
selby.ac.uk
moodle2.selby.ac.uk
moodle2.selby.ac.uk

Certificate

The complete raw certificate details for shibboleth.selby.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB4M0Ap8ABlmBz+5AWPa
cv8RkLpYUavSgma4j34ItsuwgxfoxnN+t397etk49QILG4lGq6vbgq5RWpNWG9bO
p3ntfto0Y8dFv2H6wI1NbrM+qflhcvMIjKkgzMeb8Gr2++XTsmgbVb9CfrsDeMT7
HMsJOP5GBLfU4uv0l8aS4XzeRgLM553pEDswSJ6YZbykYRjMhaESbPcVfsd3Qpta
gxOBQSI8R34o7CPtuGK6rkemx9p2CqKc4ykBNMk8CRtcnKuL7kUWl6emgE4HgjkS
QPJuLNP0jusycxNerL9vhjwlIGKhsjr12rGGz4dLS10TxZkIY8OqByX69CPG5JD5
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 234449873712818681899878363409972330920766888540
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-08 13:39:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-08 13:39:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Yorkshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SELBY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Selby College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shibboleth.selby.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23242666345423139337176033772281916230475979096442608435268168387349946073962334600075872170596150613305258389329035915120133201287936958101989536765310890731252576093402631323251971579655049740954784789757375948120184486560101365342421521008920345303730896476237520566192553355967775010854152097365344808554156810900646013431272050689862792482909902138874028963395286622239181371618886200659288525302708201337050207124619074942711512314589240909781756888929015885039784433056653528924697680095925244565937810688118409593366899202613643692340417407711312069644716214144303712127053368423395382411383655787780706990393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shibboleth.selby.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							75b6e0e02a8c337bf51c9cd9c30f644f29ac0ae4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009f29a42ad1b73ac5bb30505ed9aa1c553b379981af2d3cc88984dbefe678af96b412ce70bb2f9427d7d3073e5f34e148dfa9bf3350fec4192cc4affe414747f6a9bab477fd1cd9eff5c094ed4b546fe18ceaa63b6768bfcacbe31a0c00fce68bfa972356937467d33546cb36950035175666dbd7546eca4931699b660c65fd3c8983f12a305d42f35e595cc10b8dd27ef9c2ef15e11cc06747281f8cd7b93889d07cd6cbd28fb394035e11731e11feffa5f68ce8a91d86441031cd8cf7ddca9553d88d01ca802520de6f7d84fd517dd69e0250ed000b6321abd945d893031c817f88e9e90c2899453ab074f84923e7f8083e2b2096a13bece9852ef12dddf2ee