api.ocp3.azure.dso.digital.mod.uk

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number 25:ea:e3:35:55:1e:be:3c:52:39:9d:9f:8d:b7:44 was issued on by ZeroSSL.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.ocp3.azure.dso.digital.mod.uk

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate has expire since

Certificate Details

Serial Number (hex): 25:ea:e3:35:55:1e:be:3c:52:39:9d:9f:8d:b7:44
Serial Number (int): 196879068911543246560457911408899908
Serial Number lenght: 118 bits, 15 octets

SubjectKeyId: 8a:a1:16:cf:df:0d:32:18:59:0c:38:45:fd:20:32:ad:b8:b8:26:0d
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): 1d:f0:b8:6a:c5:f8:6f:6b:cf:2b:84:e6:d4:b9:49:3d:74:18:8d:26
Fingerprint (sha256): 01:8d:2b:a6:21:6c:3b:5e:3b:a6:14:60:70:e4:d3:ff:46:42:19:71:7c:48:6b:aa:37:62:9e:ed:32:a9:11:5c

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate api.ocp3.azure.dso.digital.mod.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.ocp3.azure.dso.digital.mod.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.ocp3.azure.dso.digital.mod.uk

Other certificates including the domain name mod.uk

(limited to 100 certificates)
*.dgwmail.mod.uk
test.asems.mod.uk
indirect.public.mod.uk
helpdesk.defencegateway.mod.uk
staging-recruitment.raf.mod.uk
api.ocp1.azure.dso.digital.mod.uk
admin-app.conor.fieldreport.digital.mod.uk
sba.mod.uk
ems.ahe.mod.uk
api.ocp3.azure.dso.digital.mod.uk
asems.mod.uk
www.armynet.mod.uk
www.raf.mod.uk
vle.rmasandhurst.mod.uk
jive.defencegateway.mod.uk
dc.mod.uk
mod.uk
*.defencegateway.mod.uk
mta-sts.rafac.mod.uk
testfotoweb.royalnavy.mod.uk
mod.uk
tfs.royalnavy.mod.uk
qbp.army.mod.uk
api.ocp4.azure.dso.digital.mod.uk
clms.mod.uk
vle.rmasandhurst.mod.uk
chatbot-frontend-staging.royalnavy.mod.uk
www.mafis.mod.uk
atga.mod.uk
bader.mod.uk
*.defencegateway.mod.uk
www.da.mod.uk
monitoring.stage.r2d2.alpha.digital.mod.uk
emsgw.mod.uk
www.asems.mod.uk
mod.uk
*.bader.mod.uk
armycms.mod.uk
www.asems.mod.uk
dcdc.mod.uk
www.defenceshare.mod.uk
staging.cgo.mod.uk
*.apps.ocp1.azure.dso.digital.mod.uk
api.ocp2.azure.dso.digital.mod.uk
*.dasa.service.mod.uk
sni.cloudflaressl.com
www.defencebrandportal.mod.uk
www.dne-careerhub.defencegateway.mod.uk
des.mod.uk
dle.mod.uk
api.ocp4.azure.dso.digital.mod.uk
t.recruitment-campaigns.mod.uk
www.atga.mod.uk
sba.mod.uk
mod.uk
www.atga.mod.uk
mod.uk
vle.rmasandhurst.mod.uk
backoffice.tom.fieldreport.digital.mod.uk
api.ocp3.azure.dso.digital.mod.uk
doctrine.mod.uk
qbp.army.mod.uk
armymail.mod.uk
testcontracts.mod.uk
api.ocp3.azure.dso.digital.mod.uk
staging-recruitment.raf.mod.uk
rcds-extranet.mod.uk
foundry.digital.mod.uk
api.ocp2.azure.dso.digital.mod.uk
www.armynet.mod.uk
mod.uk
intpg1.recruitment.mod.uk
register.byod.da.mod.uk
design-system.digital.mod.uk
asems.mod.uk
*.apps.ocp3.azure.dso.digital.mod.uk
www.armynet.mod.uk
army.mod.uk
jobs.raf.mod.uk
monitoring.stage.r2d2.alpha.digital.mod.uk
asems.mod.uk
design-system.navy.digital.mod.uk
www.asems.mod.uk
webexuser.learn.mod.uk
design-system.navy.digital.mod.uk
sni.cloudflaressl.com
mod.uk
hybrid.mod.gov.uk
www.nsv.mod.uk
www.bdfl.mod.uk
alumni.raf.mod.uk
cms.raf.mod.uk
dtt.cms.dlp.mod.uk
*.corpserv.mod.uk
monitoring.stage.r2d2.alpha.digital.mod.uk
*.defencegateway.mod.uk
mod.uk
api.alan.fieldreport.digital.mod.uk
mod.uk
servicemanual.digital.mod.uk

Certificate

The complete raw certificate details for api.ocp3.azure.dso.digital.mod.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvL8rFu2z1mq+eDHpHdN
eywUGncxRqzcx+xXCvYau5s/Jj9mMWiZz0BYly5YNkx1mx23yYr5u6nfhW9DmkD+
t1ST2HUP0unNPm6XdTcQ7tDc6Ig9DTaUjFsbIxIRNNAqo2jlyGE9tA3FJXdq4SKJ
wVGx2z5UPygWYICjOuYA6bMpNDGdR9MhlcyPE+/Fw3D9bsWYp7nyJ66h6N2BA4x7
Vbg523nxPR4sFinLKJDvr5OU0nxLzHnQJdX+brNQ71pNzz0tU227n7Ya5c/wLLpN
0HMXooUU/4K9F1gV3xvscH0XjJBWDcoKhrTe+LLMtwvaZLPX642XjbvhEdmqpC5c
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 196879068911543246560457911408899908
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.ocp3.azure.dso.digital.mod.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26124912180966046869685598167322633142486554181500786077029123477266906119056164533390317933023928108856004409563165745916168207924346490358595815840739724134020285183130897315047472662935706792309274597395834450586756891882560221376697105757129519601495819568303971480941786424828801911106863196603168291146584106222474837538780999425169942769928510775640554083814760088440444785974191937108281930711008722186705977971157782326314083177245786733114224011968969696734466705842500554213488844800666028889782239162514001457725766997431685859172172220770537743872897586369091448590331017417788556385548471505789547076727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8aa116cfdf0d3218590c3845fd2032adb8b8260d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000018269378eee00000403004730450220472c847add4de20470ca8f24c48ae696f3c6f2af743e2acff40279f3e1401808022100f1e6cb448bfe6497c941f89faaed7d2ff7072d74ec4a10050974e6ced4a0f99700770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000018269378ec1000004030048304602210093a671f1c94128d47a5a3d1b6d6579b0e2a5f15933de778622f4151a18901515022100f2a2da9a4b49d35544819d44d57f5f846a70bdeb2cb356c3ae6a66d7d9863b16
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ocp3.azure.dso.digital.mod.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00549e3b87e0afa3412ac201c5d741270da875eaa0143ef80d81cecbd80b2ff0cd6fe4daaa5117e51977286f63a6ae7dcb8c26be889e33b41b0b008294a861174bec0a476be977657833f8194738e2fb832b13fba9726c7b05b2b23ccd6abdaaf2fab6942a03adfdd8638fc7d26c9f5572f4e0a11d7f5418113f88eeec51858e7bf1a3aa758dc512bd54fea899dd0cf94c808794d9977bb77c019f9618fa42160a4c1e15da18dced30d756b274f1f64d16735fc55db36821944da25e702cb29f1cd72c7ea075bc21ed344fad62f1b421341646f8563b2c3637cc6b744324f5ed88a815bd8f64fbf97e977faf519506b50589ff4820e712d8103d240ad69b459769d427afdea7171a25e6b4d3bfcc53b46bfec18c4528f18a32ab4362069db3efaabf3b801044dbe068405f6e907125912505b659cf493b956dda6735caeada91f0438b18052abd9a8473b998b0fe8d0980f18f40f4182fe574e9b8ea592f41708269e64ea45ba5a8a36d158c5eb0425e63753a703964f6f029ca104f4d1cd64647816cf7c89755fab6efcf247670680ef477e3db6060fac8f725b0c576aca3ac86f10aadfc45ca04eac780cc43e8da94ae9bbe482836ca19f43d7e39e760a5a8974ee81e0d6f277ac67f7790a575974aa3b851235b61c6539cb90f63bf1d6cb931c9985b8abfcba98baeaa297fda9ec971d8ce12ab86f51cde416fc89fda3f6850