primaryplus.britishcouncil.org

- British Council -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 73:03:0c:4e:93:33:b8:4c:00:00:00:00:50:d9:98:a0 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

British Council

Organization: British Council
Organization unit: YL
State / Province: London
Locality: London
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 73:03:0c:4e:93:33:b8:4c:00:00:00:00:50:d9:98:a0
Serial Number (int): 152877046020109671777410291893125355680
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 0b:98:6e:b7:ca:89:2e:a3:d9:87:c4:1e:53:f0:c3:a7:49:58:c6:14
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 3a:e7:60:38:2d:65:03:66:df:86:43:2a:cf:52:6a:e8:6b:85:74:5a
Fingerprint (sha256): 00:44:2c:3d:43:5a:36:75:a5:95:bd:af:da:ac:91:e9:0d:07:bb:d0:09:cd:fc:2a:d0:ad:d3:27:3a:a5:d6:31

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate primaryplus.britishcouncil.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for primaryplus.britishcouncil.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

primaryplus.britishcouncil.org
www.primaryplus.britishcouncil.org

Other certificates including the domain name britishcouncil.org

(limited to 100 certificates)
statuspage.io
survey.britishcouncil.org
primaryplus.britishcouncil.org
dns-vetting1-mims-pawel.map.fastly.net
taqaddam-tasters.britishcouncil.org
accreditation.lumanity.com
bcppx.fabs.britishcouncil.org
e2.shared.global.fastly.net
f.ssl.fastly.net
alumnicredentials.kcl.ac.uk
www.mylibrary.britishcouncil.org
e2.shared.global.fastly.net
a2.ssl.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
vst.britishcouncil.org
monitor.jumio.com
domains.clickmeter.com
monitor.jumio.com
achievements.launchyou.com
agent-training.britishcouncil.org
roam2.britishcouncil.org
dns-vetting1-mims-pawel.map.fastly.net
f.ssl.fastly.net
literature.britishcouncil.org
achievements.launchyou.com
distribution-status.rbb-online.de
e2.shared.global.fastly.net
*.BritishCouncil.org
examinertraining.britishcouncil.org
e2.shared.global.fastly.net
americas.portal.britishcouncil.org
literature.britishcouncil.org
e2.shared.global.fastly.net
e2.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
careers.britishcouncil.org
school-partner-finder.britishcouncil.org
school-partner-finder.britishcouncil.org
reportcp-uat.britishcouncil.org
dns-vetting1-mims-pawel.map.fastly.net
accreditation.lumanity.com
*.britishcouncil.org
centresupport.britishcouncil.org
monitor.jumio.com
statuspage.io
e2.shared.global.fastly.net
*.britishcouncil.org
statuspage.io
dns-vetting1-mims-pawel.map.fastly.net
*.professionalskills.britishcouncil.org
e2.shared.global.fastly.net
a2.ssl.fastly.net
statuspage.io
*.britishcouncil.org
achievements.launchyou.com
statuspage.io
brandhub.britishcouncil.org
*.sms.britishcouncil.org
a2.ssl.fastly.net
apply.gmt.britishcouncil.org
statuspage.io
spainportal.britishcouncil.org
malaysia.ielts.britishcouncil.org
edinburghshowcase.britishcouncil.org
taqaddam.britishcouncil.org
*.britishcouncil.org
*.britishcouncil.org
achievements.launchyou.com
statuspage.io
ssl514874.cloudflaressl.com
statuspage.io
statuspage.io
taqaddam-tasters.britishcouncil.org
1001ways.britishcouncil.org
f.ssl.fastly.net
accreditation.lumanity.com
statuspage.io
f.ssl.fastly.net
f.ssl.fastly.net
statuspage.io
dns-vetting1-mims-pawel.map.fastly.net
5694979263430656-fe3.pantheonsite.io
e2.shared.global.fastly.net
apply.gmt.britishcouncil.org
aptistraining.britishcouncil.org
e2.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
taqaddam.britishcouncil.org
statuspage.io
e2.shared.global.fastly.net
f.ssl.fastly.net
accreditation.lumanity.com
statuspage.io
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
distribution-status.rbb-online.de
statuspage.io
statuspage.io
edinburghshowcase.britishcouncil.org
taqaddam.britishcouncil.org

Certificate

The complete raw certificate details for primaryplus.britishcouncil.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 152877046020109671777410291893125355680
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-14 11:41:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-26 12:11:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Council'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'YL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'primaryplus.britishcouncil.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 836063174257744839364930003236259211000078676234708374247657466891042855168252874905165896954354782163018430415346157505277363972895953769591084158093612450598743818481287588766011146238571925957644655501006025899616537026614883532146868966121108182079841916304972868553065095296051466631839731437257950945737477285940625153673603435556249981472278320611920366559023887072546814409634945109090428797526044954581258841665703947086688794492131605252900616724131322667324756692899739174166939006340837202120651279655523734985452832309632524388275691938426030671775955722597383284308710310057970736426049459381641437996252170156844500500499650203738665575140854836557348901938293869183040661967929641353180443898067820153857961109612531759193434140842195287794787916927401351673099343148968700022491957425037328785985557114748246578739147856261157794880425935809780881808536147112260956162212175347895692216257174208451964373421270364617384639216220761044750734932461279885386069057524316051716043067402765220099770859910870302674834212117410473682764665072655033408764188638999851761114382977110398727872065156116371092701196946099135085977393393173165238735554979430356823955495865792254293160707550018598473231358700255133302759380251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primaryplus.britishcouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primaryplus.britishcouncil.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b986eb7ca892ea3d987c41e53f0c3a74958c614
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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