www.selby.ac.uk

Issued by TERENA SSL CA

About this certificate

This digital certificate with serial number 81:4b:06:65:92:7f:4d:7c:5a:88:21:ae:5f:f4:3e:94 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.selby.ac.uk,OU=Domain Control Validated

TERENA

Organization: TERENA
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 81:4b:06:65:92:7f:4d:7c:5a:88:21:ae:5f:f4:3e:94
Serial Number (int): 171859963462485006456597923767038262932
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9b:50:0d:a2:05:1a:b5:b4:c9:18:51:28:2e:b5:92:3c:09:58:3f:d6
AuthorityKeyId: 0c:bd:93:68:0c:f3:de:ab:a3:49:6b:2b:37:57:47:ea:90:e3:b9:ed

Fingerprint (sha1): 71:9e:9d:8c:f4:c8:d5:6b:51:18:e7:1b:1b:5c:7f:78:87:7b:38:5c
Fingerprint (sha256): ea:14:bd:51:b5:98:f2:25:a8:05:65:56:fc:d1:0e:a6:c0:10:75:5b:ff:b3:bd:96:19:48:f3:16:66:7a:ed:05

Issuing Certificate URL: http://crt.tcs.terena.org/TERENASSLCA.crt

Revocation information

OCSP Server: http://ocsp.tcs.terena.org
CRL Distribution Point: http://crl.tcs.terena.org/TERENASSLCA.crl

Check the revocation status for certificate www.selby.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.selby.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.selby.ac.uk

Other certificates including the domain name selby.ac.uk

(limited to 100 certificates)
moodle2.selby.ac.uk
moodle2.selby.ac.uk
moodle2.selby.ac.uk
moodle2.selby.ac.uk
moodle2.selby.ac.uk
selby.ac.uk
moodle2.selby.ac.uk
remote2.selby.ac.uk
mail.selby.ac.uk
moodle2.selby.ac.uk
moodle.selby.ac.uk
remote2.selby.ac.uk
selby.ac.uk
www.selby.ac.uk
remote2.selby.ac.uk
www.selby.ac.uk
www.selby.ac.uk
moodle2.selby.ac.uk
www.selby.ac.uk
selby.ac.uk
selby.ac.uk
etracker.selby.ac.uk
moodle2.selby.ac.uk
selbycp.selby.ac.uk
etracker.selby.ac.uk
selby.ac.uk
mail.selby.ac.uk
moodle2.selby.ac.uk
etracker.selby.ac.uk
selbycp.selby.ac.uk
selbycp.selby.ac.uk
selby.ac.uk
moodle2.selby.ac.uk
selby.ac.uk
selby.ac.uk
selby.ac.uk
www.selby.ac.uk
selby.ac.uk
selby.ac.uk
shibboleth.selby.ac.uk
moodle2.selby.ac.uk
selbycp.selby.ac.uk
selbycp.selby.ac.uk
selby.ac.uk
moodle2.selby.ac.uk
remote.selby.ac.uk
selby.ac.uk
www.selby.ac.uk
www.selby.ac.uk
selbycp.selby.ac.uk
selby.ac.uk
www.selby.ac.uk
selby.ac.uk
selbycp.selby.ac.uk
shibboleth.selby.ac.uk
shibboleth.selby.ac.uk
moodle2.selby.ac.uk
www.selby.ac.uk
www.selby.ac.uk
remote2.selby.ac.uk
shibboleth.selby.ac.uk
mail.selby.ac.uk
www.selby.ac.uk
remote2.selby.ac.uk
etracker.selby.ac.uk
selby.ac.uk
moodle2.selby.ac.uk
moodle2.selby.ac.uk

Certificate

The complete raw certificate details for www.selby.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtx7y7kWmSQqXBHV8fD8K
c9l1Lb6a4IWQ+rv2ONBo1SnB36aT5Uo/JK/xmNhXIfm1CxydIo5WuFa7E6pf2Gth
pqUfKrZVaxnO/jZD+0q900Ker8AssstgAJ5O1QrcJ8uGXgQ1B/y8G6WCZh5x8S+q
6Uhyvpc+wcyRbkK4BsilG4KRBOlv5PZxtkm05x+gcRhuW5SEjIZTzu0p5OIU8hKA
IFd4HZdzph2qs3Izmid2+Aw7bnVlyciWRvL7ykpk51yNaLbe6fd7swkvmamTXNIL
+jYEHdV50uw2/+6/hWG+xiyNhZfCOoiLRKyVgXPvMCKFgy+ObQ7UkzZ3A07lLbV/
d5JgX1vwiIWqxyvlXXtD8cO9uwVygjiN+IdRkqcg2RuJHHFowPT7bqyx5DCpc3hT
74uXdSPThEVwfCMDCuxRIprbN6ksRh1GsHUZRmZT7lUbXVE9mYQfDTbsRGKf/9dI
XBWB+uiVtrp9XsB4B+qX97cSF61t/Rw/Fp3nvwSLTcG6Hsc+qwWo0Vz+E21oA7gi
v/oX9DJ6xSl7bks0+xaiNMUgzQdeq9vAAJhx7/clbLR8S/jrQ7SRtPnfyCfb7w2k
WccKassxO7toFUvaD+mDGTUYHqGfeoTeN7EDdorgqbjTClJzbTOgYws5Re9C5Lcz
q0KuaRllaS8KXq/cUGKayucCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 171859963462485006456597923767038262932
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.selby.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 747068070280151870881581009063901095478135421323346517015462898190911050533568756505682968278487930356429838026269430564046115929187927169663037978060792154021054792484522323379465753112560986401180964401348167423868114545581701406666541299026921832214740831261585044150125902185966128270865806523378507820077619193678045826431965281903579275321404348130576013039074386740178433287415760531943964893003139630849486048161910762519555202819599781978090523964261368150435771783566170052772381407793587277600045328986548799655536887824337474294263642774097008850218262667980724635408153053916616424074671252364629811647028823046699580506599432044705966668047056538156605958936230998054354356535336205634238346735688537595623209509370257277199664086958046260832141060399239012800733788325233053618435274959935284271848938165259346155353834835113457982647109133775260123507024272213181645080486431816886754834656976486825888990150935625704398665547008726102306447875948830624775962762435231411761712640401381575756263703321218264759245762403698067660427130944719417724350668366416676761562894560899990701699411326640493860166374363960936390359492714974575507152834048021985758021686819589705168860434298015622636784519259839753091301427943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cbd93680cf3deaba3496b2b375747ea90e3b9ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b500da2051ab5b4c91851282eb5923c09583fd6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.tcs.terena.org/TERENASSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.tcs.terena.org/TERENASSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tcs.terena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selby.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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