openathensla.rcm.ac.uk

- Royal College of Music -

Issued by TERENA SSL CA

About this certificate

This digital certificate with serial number 3d:f6:7c:6d:a6:42:3f:b1:9f:17:1a:2e:8f:86:71:eb was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Royal College of Music

Organization: Royal College of Music
Organization unit: ICT
Address: Prince Consort Road
Postal code: SW7 2BS
State / Province: Greater London
Locality: LONDON
Country: GB

TERENA

Organization: TERENA
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:f6:7c:6d:a6:42:3f:b1:9f:17:1a:2e:8f:86:71:eb
Serial Number (int): 82362736476194604225759728861396234731
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 9c:b1:66:af:bc:60:1a:95:02:bc:dd:f8:f6:4b:ef:07:62:29:be:0c
AuthorityKeyId: 0c:bd:93:68:0c:f3:de:ab:a3:49:6b:2b:37:57:47:ea:90:e3:b9:ed

Fingerprint (sha1): ce:1b:54:d6:63:66:6d:a3:ab:20:3d:9d:96:57:47:83:8c:20:6b:62
Fingerprint (sha256): cc:e8:34:6d:a2:34:3e:dd:35:4d:ec:2a:32:08:77:a6:b3:88:df:a5:ac:84:4a:b4:12:58:10:04:76:16:a1:f6

Issuing Certificate URL: http://crt.tcs.terena.org/TERENASSLCA.crt

Revocation information

OCSP Server: http://ocsp.tcs.terena.org
CRL Distribution Point: http://crl.tcs.terena.org/TERENASSLCA.crl

Check the revocation status for certificate openathensla.rcm.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for openathensla.rcm.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

openathensla.rcm.ac.uk

Other certificates including the domain name rcm.ac.uk

(limited to 100 certificates)
openathensla.rcm.ac.uk
rcm-owa.rcm.ac.uk
muse.rcm.ac.uk
museumcollections.rcm.ac.uk
museumcollections.rcm.ac.uk
activesync.rcm.ac.uk
museumcollections.rcm.ac.uk
adfs.rcm.ac.uk
www.petergellhorn.rcm.ac.uk
rcm.ac.uk
museumcollections.rcm.ac.uk
registration.rcm.ac.uk
*.rcm.ac.uk
*.rcm.ac.uk
www.petergellhorn.rcm.ac.uk
museumcollections.rcm.ac.uk
ext.muse.rcm.ac.uk
fees.rcm.ac.uk
researchonline-uat.rcm.ac.uk
rcm-dc-01.rcm.ac.uk
museumcollections.rcm.ac.uk
museumcollections.rcm.ac.uk
*.rcm.ac.uk
rcm.ac.uk
museumcollections.rcm.ac.uk
payments.rcm.ac.uk
payments.rcm.ac.uk
openathensla.rcm.ac.uk
ext.muse.rcm.ac.uk
*.rcm.ac.uk
www.boxoffice.rcm.ac.uk
activesync.rcm.ac.uk
fees.rcm.ac.uk
rcmstream.rcm.ac.uk
rcm-dc-02.rcm.ac.uk
activesync.rcm.ac.uk
mail.rcm.ac.uk
activesync.rcm.ac.uk
museumcollections.rcm.ac.uk
learn.rcm.ac.uk
rcmstream.rcm.ac.uk
museumcollections.rcm.ac.uk
rcmstream.rcm.ac.uk
activesync.rcm.ac.uk
adfs.rcm.ac.uk
muse.rcm.ac.uk
rcmmail.rcm.ac.uk
adfs.rcm.ac.uk
muse.rcm.ac.uk
password.rcm.ac.uk
fees.rcm.ac.uk
activesync.rcm.ac.uk
registration.rcm.ac.uk
museumcollections.rcm.ac.uk
fees.rcm.ac.uk
ext.mysite.rcm.ac.uk
password.rcm.ac.uk
museumcollections.rcm.ac.uk
openathensla.rcm.ac.uk
activesync.rcm.ac.uk
fees.rcm.ac.uk
museumcollections.rcm.ac.uk
museumcollections.rcm.ac.uk
rcm.ac.uk
museumcollections.rcm.ac.uk
password.rcm.ac.uk
openathensla.rcm.ac.uk
learn.rcm.ac.uk
mail.rcm.ac.uk
petergellhorn.rcm.ac.uk
password.rcm.ac.uk
adfs.rcm.ac.uk
ext.mysite.rcm.ac.uk
*.rcm.ac.uk
adfs.rcm.ac.uk
rcmwireless.rcm.ac.uk
rcmldaps.rcm.ac.uk
www.boxoffice.rcm.ac.uk
registration.rcm.ac.uk
researchonline-uat.rcm.ac.uk
learn.rcm.ac.uk
muse.rcm.ac.uk
*.rcm.ac.uk
registration.rcm.ac.uk
password.rcm.ac.uk
*.rcm.ac.uk
*.rcm.ac.uk

Certificate

The complete raw certificate details for openathensla.rcm.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJiAZVFI43fYZ7XwxlJu
ovTZZZQSGcMokGfuvIAIz/oiSCJcjMtHBz4KxvFfVHYoHKZeChf5KH1iFynkoTeY
6JddCvmoFWKdZ52QbziJqsCJftRcQ6/KZ4ST1Qt8l4JxIGe9nJuGlRcsdi1+2CH+
/XNyJ8LOG+KyUiyBEHvbvfXaQhBOYVVjGfZYO0Ej4v383hfRUmsMYI8fwIcvbPLe
oCYvgI7DFQSDXijpyvcq8vBKHAPOBNBIOp2EaIG9Oee36VQkrlAflqqmq/cRr/3k
8g/ynr8SYBooVTZ3/lTJiUrPEMELwa93Quhkl6W7fKhxnTVmgG7ZSZlxi63kWpGF
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 82362736476194604225759728861396234731
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SW7 2BS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LONDON'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Prince Consort Road'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Royal College of Music'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'openathensla.rcm.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23808002648734459273751987591272305524798875049660068905033257052457669351921143738770945148974788454004553265906846629593781544692874890433702866578285258901074352054379772098278193793665521137029437731031543782592596731766034624025856065680765086392367122238581508248759054394822672979161306195627103238788280495024583903416156564679140102859520940471619155174677094014429572892313876074317932345168455922096494102597249406255857423222907954493796002379768578711025336390007362250794748645560462962692428675619448828054461729377058744394663583708540620955719407922748428667168991485005447163489130777261911949018401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cbd93680cf3deaba3496b2b375747ea90e3b9ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9cb166afbc601a9502bcddf8f64bef076229be0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.tcs.terena.org/TERENASSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.tcs.terena.org/TERENASSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tcs.terena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openathensla.rcm.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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