player.open.edu

- The Open University -

Issued by GEANT EV RSA CA 4

About this certificate

This digital certificate with serial number 51:b6:c5:60:8d:3a:4b:f7:5c:2a:a1:29:9b:48:2f:ad was issued on by GEANT Vereniging.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Open University

Company registration number: RC000391
Organization: The Open University
State / Province: Buckinghamshire
Country: GB

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 51:b6:c5:60:8d:3a:4b:f7:5c:2a:a1:29:9b:48:2f:ad
Serial Number (int): 108616468971134907904871451215908057005
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 99:ab:14:95:d2:52:47:68:f6:bd:34:13:8b:a2:b9:c5:f1:bc:cc:6b
AuthorityKeyId: b6:20:0e:ae:a3:cb:e9:55:03:06:13:66:d4:ac:be:27:90:54:60:f3

Fingerprint (sha1): 79:4e:37:02:3c:17:a0:86:05:0a:3d:9b:2b:71:69:80:b7:55:7a:ed
Fingerprint (sha256): f2:16:f8:c7:8d:4c:1d:be:ee:3a:3f:36:0f:1d:8f:2f:44:03:59:0b:f1:e7:b0:cb:20:53:2f:d5:f4:f6:ae:c4

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTEVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTEVRSACA4.crl

Check the revocation status for certificate player.open.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for player.open.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

player.open.edu

Other certificates including the domain name open.edu

(limited to 100 certificates)
player.open.edu
www-dev.open.edu
msds-acct.open.edu
www-internal.open.edu
www-internal.open.edu
openlearncreatelive.open.edu
www.open.edu
olclive-internal.open.edu
msds.open.edu
open.ac.uk
www-syst-external.open.edu
www.open.edu
stadium.open.ac.uk
olcsyst.open.edu
www-dev.open.edu
msds.open.edu
player.open.edu
msds.open.edu
www-nft-internal.open.edu
www-test.open.edu
www.open.edu
www.open.edu
www.open.edu
stadium.open.ac.uk
www-acct.open.edu
stadium.open.ac.uk
msds.open.edu
www.open.edu
msds.open.edu
stadium.open.ac.uk
stadium.open.ac.uk
msds-acct.open.edu
stadium.open.ac.uk
www-internal.open.edu
msds-test.open.edu
olcsyst-internal.open.edu
msds.open.edu
msds.open.edu
www.open.edu
player.open.edu
stadium.open.ac.uk
cdn-nft.open.edu
www-nft.open.edu
openlearnacct-internal.open.edu
msds-acct.open.edu
stadium.open.ac.uk
openlearncreateacct-internal.open.edu
player.open.edu
msds-acct.open.edu
open.ac.uk
www-syst.open.edu
www-syst.open.edu
www.open.edu
stadium.open.ac.uk
www-syst-internal.open.edu
stadium.open.ac.uk
msds.open.edu
stadium.open.ac.uk
msds-acct.open.edu
www-acct.open.edu
www.open.edu
openlearnacct-internal.open.edu
www-test.open.edu
player.open.edu
player.open.edu
msds.open.edu
msds.open.edu
www.open.edu

Certificate

The complete raw certificate details for player.open.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCJ7Mh9/tQOc4dJQAgq5
oEsjRxJ3iDYXFaNJcr1QO7wqfzcMgg+MGji/7VaUDvfEeeyGtOQu9/MEvMtBLC7o
SUmaRQgtRfDWY/Qejzohw5rTVAROSlFLHVHa9CBqmgtuMcwh1brDjuxwb6gXdYqF
LCiqrJWjyWwwFBgMuTfi/8GTmoPpHwy/BFtFs00boZXWDgxTaFJ7AKSHZYkTWg3v
uaEdR5YrW1bD+FpucOl7owAqfijvc/Sx3NB6TVYtUohrLnjQlscB50CnYyeUzPi7
Dq7FdrJHf5y8rf7mwgFieG40T2Z9se+ZfRAOXeuAv4MFC+0iJ9kKLlAs1VE9yZTc
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 108616468971134907904871451215908057005
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT EV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RC000391'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Buckinghamshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Open University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'player.open.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23244851443749427758056513117779142099505957055760781617108442552721864569010476780879296884173949748012534042170435085700015296314453578539749319278885066849152505039542992288437661678057451553125057777959066599247726705363529693937508638548244406879952999198284242461161612874121801617248706165998134787784020630788124010779130532044163269839763510654540269751082869135055355360119925606543831395719150617644312336031341536412356218979064433216039457737411515766242159780640063681779516489855809836612949377387107007830815670388916844373819923017613556799384275006178153120063427179479266195270473323755417564929271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b6200eaea3cbe95503061366d4acbe27905460f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99ab1495d2524768f6bd34138ba2b9c5f1bccc6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTEVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTEVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.open.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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