mail.selby.ac.uk

- Selby College -

Issued by TERENA SSL CA

About this certificate

This digital certificate with serial number 68:67:11:ef:dc:95:4c:75:0a:81:87:49:9f:c4:92:79 was issued on by TERENA.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • 1 DNS name(s) are bare public suffixes: fig The domain SHOULD NOT have a bare public suffix (awslabs certlint)

Selby College

Organization: Selby College
Organization unit: Network Services
State / Province: North Yorkshire
Locality: Selby
Country: GB

TERENA

Organization: TERENA
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 68:67:11:ef:dc:95:4c:75:0a:81:87:49:9f:c4:92:79
Serial Number (int): 138774881942821634182005751897536107129
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 5b:5e:68:da:ee:b9:f9:4e:a7:c2:7c:8d:e0:96:56:b8:83:e8:1f:6b
AuthorityKeyId: 0c:bd:93:68:0c:f3:de:ab:a3:49:6b:2b:37:57:47:ea:90:e3:b9:ed

Fingerprint (sha1): 62:c4:be:70:cc:4e:e8:07:52:1c:b2:e2:35:af:17:52:59:5e:c7:16
Fingerprint (sha256): e8:1a:2b:b5:0d:bc:6d:b2:55:f1:74:ea:8e:bf:b6:80:69:eb:e9:1b:f3:91:45:4e:24:f1:7e:0c:25:64:be:fa

Issuing Certificate URL: http://crt.tcs.terena.org/TERENASSLCA.crt

Revocation information

OCSP Server: http://ocsp.tcs.terena.org
CRL Distribution Point: http://crl.tcs.terena.org/TERENASSLCA.crl

Check the revocation status for certificate mail.selby.ac.uk

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.selby.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.selby.ac.uk
autodiscover.selby.ac.uk
autodiscover.selby.college
fig
fig.selby.college

Other certificates including the domain name selby.ac.uk

(limited to 100 certificates)
moodle2.selby.ac.uk
moodle2.selby.ac.uk
moodle2.selby.ac.uk
moodle2.selby.ac.uk
moodle2.selby.ac.uk
selby.ac.uk
moodle2.selby.ac.uk
remote2.selby.ac.uk
mail.selby.ac.uk
moodle2.selby.ac.uk
moodle.selby.ac.uk
remote2.selby.ac.uk
selby.ac.uk
www.selby.ac.uk
remote2.selby.ac.uk
www.selby.ac.uk
www.selby.ac.uk
moodle2.selby.ac.uk
www.selby.ac.uk
selby.ac.uk
selby.ac.uk
etracker.selby.ac.uk
moodle2.selby.ac.uk
selbycp.selby.ac.uk
etracker.selby.ac.uk
selby.ac.uk
mail.selby.ac.uk
moodle2.selby.ac.uk
etracker.selby.ac.uk
selbycp.selby.ac.uk
selbycp.selby.ac.uk
selby.ac.uk
moodle2.selby.ac.uk
selby.ac.uk
selby.ac.uk
selby.ac.uk
www.selby.ac.uk
selby.ac.uk
selby.ac.uk
shibboleth.selby.ac.uk
moodle2.selby.ac.uk
selbycp.selby.ac.uk
selbycp.selby.ac.uk
selby.ac.uk
moodle2.selby.ac.uk
remote.selby.ac.uk
selby.ac.uk
www.selby.ac.uk
www.selby.ac.uk
selbycp.selby.ac.uk
selby.ac.uk
www.selby.ac.uk
selby.ac.uk
selbycp.selby.ac.uk
shibboleth.selby.ac.uk
shibboleth.selby.ac.uk
moodle2.selby.ac.uk
www.selby.ac.uk
www.selby.ac.uk
remote2.selby.ac.uk
shibboleth.selby.ac.uk
mail.selby.ac.uk
www.selby.ac.uk
remote2.selby.ac.uk
etracker.selby.ac.uk
selby.ac.uk
moodle2.selby.ac.uk
moodle2.selby.ac.uk

Certificate

The complete raw certificate details for mail.selby.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 138774881942821634182005751897536107129
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Yorkshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Selby'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Selby College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.selby.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 548341965833961583968101697772025582194477632599426141350370159125561177280345069019063284440349040678449442377168314200771285399611510598485564608646301177901828183834101901585241328271849901426407850625315756492952954436814829793272134998842492511709902757303113791917295704293622718987681375160125109570032152622602899554913207825660306651982341458461423398594949555730890996442858071713278759720425513075172451352751664259572954402490725645859135266510342307656061277030888795227906690982221958177407049686408784778650329901033856268282822330932820906468421484252293374588413201019641416717762031430966324021580509357883072676750462454269804693951773314790710207364996248798140031169862201380071584879117376200353811168857355168475111900247464719202848589400646131128272501581620100937473885489283235895066656020469495063399896514007939611469660396551157127279000351973947051376953258239383846782747041731575602632137969424533731329259746442202673818438891366246688176182128544487609886275241795769701404486452940040615333050362299638924775797107828370778602585518619704446208724226503648881111053405446622457248356568391427906752215694927759165281693462741898522681218828748547865910169780071089476961319552072760615124543900709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cbd93680cf3deaba3496b2b375747ea90e3b9ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b5e68daeeb9f94ea7c27c8de09656b883e81f6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.tcs.terena.org/TERENASSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.tcs.terena.org/TERENASSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tcs.terena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.selby.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.selby.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.selby.college'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fig'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fig.selby.college'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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