webmail.northdevonhospice.org.uk

Issued by GeoTrust DV SSL CA

About this certificate

This digital certificate with serial number 07:1a:3a was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=qla00mFjhPciOfiB9wEphn3GBf-pW1bO,CN=webmail.northdevonhospice.org.uk,OU=GT49671238+OU=See www.geotrust.com/resources/cps (c)13+OU=Domain Control Validated - QuickSSL(R) Premium

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:1a:3a
Serial Number (int): 465466
Serial Number lenght: 19 bits, 3 octets

SubjectKeyId: a1:93:a4:bc:e5:32:eb:72:18:4a:53:e6:b4:18:12:d8:f2:99:b6:82
AuthorityKeyId: 8c:f4:d9:93:0a:47:bc:00:a0:4a:ce:4b:75:6e:a0:b6:b0:b2:7e:fc

Fingerprint (sha1): ea:97:e1:68:cb:39:2c:b7:46:4e:45:7d:eb:dd:f1:94:e5:18:e8:d7
Fingerprint (sha256): 00:0c:aa:89:5f:f9:1f:d4:66:c0:70:50:e9:5a:4d:19:3b:2f:9e:d3:2d:6d:93:a5:74:e0:b9:53:d9:87:8a:fd

Issuing Certificate URL: http://gtssldv-aia.geotrust.com/gtssldv.crt

Revocation information

OCSP Server: http://gtssldv-ocsp.geotrust.com
CRL Distribution Point: http://gtssldv-crl.geotrust.com/crls/gtssldv.crl

Check the revocation status for certificate webmail.northdevonhospice.org.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.northdevonhospice.org.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.northdevonhospice.org.uk

Other certificates including the domain name northdevonhospice.org.uk

(limited to 100 certificates)
webmail.northdevonhospice.org.uk
*.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
secure.northdevonhospice.org.uk
www.northdevonhospice.org.uk
www.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
www.northdevonhospice.org.uk
remote.northdevonhospice.org.uk
remote.northdevonhospice.org.uk
www.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
remote.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
www.northdevonhospice.org.uk
grapevine.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
*.northdevonhospice.org.uk
www.northdevonhospice.org.uk
webmail.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
*.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
*.northdevonhospice.org.uk
secure.northdevonhospice.org.uk
grapevine.northdevonhospice.org.uk
grapevine.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
grapevine.northdevonhospice.org.uk
secure.northdevonhospice.org.uk
grapevine.northdevonhospice.org.uk
secure.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
donate.northdevonhospice.org.uk

Certificate

The complete raw certificate details for webmail.northdevonhospice.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 465466
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-16 21:32:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-18 19:20:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qla00mFjhPciOfiB9wEphn3GBf-pW1bO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT49671238'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)13'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R) Premium'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.northdevonhospice.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 597567393100832125544622476786638050327923516093391220200866691118265859969825598150440141545777267153617960230416898114918001682606237498532776740463035080311580142864306756045098166286683930233036523863761872427324867656083341557310432457323239087680033899348954646555693838418263237484742054932478945720972291448857442811662482230683108539737358182067538383961602826458352179035102983834216687337587086051505947138007545370872219729347161005585164270950859507523218380634674249789200472981868182401623421262007588418457651034868988411479142866753976175818610911755812203370010554861332092380575052133231657056604442762273368300217031504492758056863598880248290832920300651518244317802780952970247706743078763263965592808998246980843386499202632253494076252162826914599886597361001945911089504229692992744069231014736801401534264528166649763387346502347976909448170573671304846290685291298997410475049380877304163267160173497336315031903852429596775872937550146871361805381036652797886898657302434508357790678155540387903963375676950326023013666314567458524892381531393041853896908641513223874266752948582111498845022999471487002610948896334235301636158074637286350922200816302616063226175635110475547619216356070459822318637124181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8cf4d9930a47bc00a04ace4b756ea0b6b0b27efc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.northdevonhospice.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssldv-crl.geotrust.com/crls/gtssldv.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a193a4bce532eb72184a53e6b41812d8f299b682
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssldv-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssldv-aia.geotrust.com/gtssldv.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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