remote2.selby.ac.uk

Issued by TERENA SSL CA

About this certificate

This digital certificate with serial number a7:10:c3:b9:b1:08:eb:39:9a:d4:1d:1c:89:fb:01:58 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=remote2.selby.ac.uk,OU=Domain Control Validated

TERENA

Organization: TERENA
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): a7:10:c3:b9:b1:08:eb:39:9a:d4:1d:1c:89:fb:01:58
Serial Number (int): 222068121827689914195306846478784987480
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 72:4a:51:c4:be:dc:7d:37:ff:bc:d9:b0:85:bc:b0:07:c7:b2:84:be
AuthorityKeyId: 0c:bd:93:68:0c:f3:de:ab:a3:49:6b:2b:37:57:47:ea:90:e3:b9:ed

Fingerprint (sha1): 3f:9c:26:33:e6:a2:ed:65:5d:16:3a:b1:49:54:2f:5b:2c:4f:83:c1
Fingerprint (sha256): ec:5c:a7:fc:28:6f:2d:5b:34:42:f0:e3:87:d7:af:16:c5:c3:31:e6:c3:b3:43:93:c4:3c:92:f1:a1:97:dd:1e

Issuing Certificate URL: http://crt.tcs.terena.org/TERENASSLCA.crt

Revocation information

OCSP Server: http://ocsp.tcs.terena.org
CRL Distribution Point: http://crl.tcs.terena.org/TERENASSLCA.crl

Check the revocation status for certificate remote2.selby.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for remote2.selby.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

remote2.selby.ac.uk

Other certificates including the domain name selby.ac.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for remote2.selby.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgIRAKcQw7mxCOs5mtQdHIn7AVgwDQYJKoZIhvcNAQEFBQAw
NjELMAkGA1UEBhMCTkwxDzANBgNVBAoTBlRFUkVOQTEWMBQGA1UEAxMNVEVSRU5B
IFNTTCBDQTAeFw0xNDAxMDgwMDAwMDBaFw0xNTAxMDgyMzU5NTlaMEExITAfBgNV
BAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRlZDEcMBoGA1UEAxMTcmVtb3RlMi5z
ZWxieS5hYy51azCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALMsJuiJ
WRdcCfUF7Bxm6X0Qv/xA2nDpL8BQYqtgZQXCgzpVvtKuDV5+QAYd5LDNx5e2yRm8
Wz+sM751HxiQ4XvYvDy324Z3DnK2eMwQifwfayCwzlovACbrfNag9JTqWNPAfgCk
EcRrDo1uNGAJ+ifSseASsJenAfI0AvLWvPrMPjxs6mxLPYT7216n/oZBDnmTLZZM
RfX+7pH86T7F9HFgzpXW8iMMwzE8wJ+sJVmmzOlVEQzy6JXQiWvUUPui4SBH9Dbz
er216M+/fYrEEA7yhWjKJ8+9ds48zYaYE775eGIOsyLxvrgZu2MoY5a0LsappRBN
wrbwrLD98VamdukiBqM00qHp1Sedcd1kXoy3SNLI1VmjhfktWVeHxvrllWXMnwmV
R/649ptm6zC9Z+Ba8M3PXvgtFt2peN6NQp5Gea9rL3vOhYa+bFSMHnjGnFZzV/Z2
0WH92mXN/2qHDuLMjRctZvX6qvWy6rRJut3JzqdiqNa097pmdL0RmtAqNrb+T/Fb
GBUCjG+yLVWU/3s9s6T6oQqnKkKntNlI6nw38JQfpgWokr0owAX4V8FEnf1+ggU/
s6KBvTqXWWl1UAq2PawGQiKrHTDn/bQrd79lYg3XhVppgNRRESW5mfEvAbq0Z21Y
Wp3rZcOJ1ZWuiHO5mDjmELHYT0+r8FBwiAvrAgMBAAGjggFwMIIBbDAfBgNVHSME
GDAWgBQMvZNoDPPeq6NJays3V0fqkOO57TAdBgNVHQ4EFgQUckpRxL7cfTf/vNmw
hbywB8eyhL4wDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMCIGA1UdIAQbMBkwDQYLKwYBBAGyMQECAh0w
CAYGZ4EMAQIBMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwudGNzLnRlcmVu
YS5vcmcvVEVSRU5BU1NMQ0EuY3JsMG0GCCsGAQUFBwEBBGEwXzA1BggrBgEFBQcw
AoYpaHR0cDovL2NydC50Y3MudGVyZW5hLm9yZy9URVJFTkFTU0xDQS5jcnQwJgYI
KwYBBQUHMAGGGmh0dHA6Ly9vY3NwLnRjcy50ZXJlbmEub3JnMB4GA1UdEQQXMBWC
E3JlbW90ZTIuc2VsYnkuYWMudWswDQYJKoZIhvcNAQEFBQADggEBAGLnBCJ19dRw
lilzQ4ncTym+MVdueCda4kGIjwfxGf8k+ItWQFBGVsxH8LAgE/sS+oMn7346rqBi
OhoThIr0H8r5/85QLPfAayX0+lRqcjLiYhlQnYq7BGP8FMtt9xWZla4Opw2yNZTW
p7rGN97BbiRbKKFoK3ZfLVR8eWPNeePCzvHcEwJpDxDDj+msP5ySdKDhLby7Txmd
MUAKK5xX4PO10xWeQNx2N54IiEYKIOJQBSqWUTtWdK3lLxH67+OwDxaGeSN52Mks
MZBFpA+9efDHMKQwNeCVVCZq1XskezIiRRjA5uUmZI1Kzj/Rvifh75Y8OXZ/ppPI
E6A+SAuEptA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 222068121827689914195306846478784987480
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'remote2.selby.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 730959899060981341534309686246455827233584718048079197432325004672022943760385783565454879221866081331742288709520064372553456235635389667174918191141332486364050421983094463793729336541063168720286373044496439394044980098510032520730689383272641985464242876224992858336412334198531419495532770382016772605926940341644916980245942992416598785954144810305360865744311057993907516353181116440302450069236854092448118813170218821188272740154845420143032182454154576940141742723816742278725443005432806679751993747348194669519912676719694396573245464451921189127788611493216421177053624856856822894626314169910595196171489514241491282750184849752114416309365064203125751578418185158293210578552820506039850746174856505700814054087940879119183345394489543357867609237936186847809546807765543675806768238072830407906548869333417084110655323180902433379619592338588446859087297545044393410118343260096554978376252882525843275370073021532055579544596072925018069169550595762339590918716996509946037728355786730388686366969382808013036226591187590394967037235154477277487414760430653086842860872059123814274065882746567646014491218765464570507927996622276471507449075763282653582417863461898620852975100090077406753983414854732980917843266539
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cbd93680cf3deaba3496b2b375747ea90e3b9ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							724a51c4bedc7d37ffbcd9b085bcb007c7b284be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.tcs.terena.org/TERENASSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.tcs.terena.org/TERENASSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tcs.terena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote2.selby.ac.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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