www.rsc.org

- The Royal Society of Chemistry -

Issued by GeoTrust TLS ECC CA G1

About this certificate

This digital certificate with serial number 02:f6:b9:f4:e9:d5:3f:6c:2b:2f:3f:54:08:ab:14:89 was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

The Royal Society of Chemistry

Organization: The Royal Society of Chemistry
Locality: Cambridge
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:f6:b9:f4:e9:d5:3f:6c:2b:2f:3f:54:08:ab:14:89
Serial Number (int): 3939532668585536374352792556818601097
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 69:c0:2b:cb:e7:9d:60:94:9d:67:3b:aa:7e:bf:54:b9:42:1b:d6:49
AuthorityKeyId: bd:82:cf:47:7b:1e:8c:22:85:fe:8c:a8:1f:c3:e1:b2:df:fd:a6:99

Fingerprint (sha1): 81:77:a0:78:cb:69:61:a7:28:49:b4:fe:e9:5e:c0:a9:f5:ae:55:c1
Fingerprint (sha256): 02:19:2f:27:ad:36:08:88:f9:62:40:f6:09:35:29:8a:60:a6:5e:ba:07:c5:47:53:ac:78:c4:7e:1e:9e:38:7d

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSECCCAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSECCCAG1.crl

Check the revocation status for certificate www.rsc.org

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rsc.org

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA256

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.rsc.org
rsc.org
carousel.rsc.org
saww.rsc.org
pubs.rsc.org
shib.rsc.org
spectraschool.rsc.org

Other certificates including the domain name rsc.org

(limited to 100 certificates)
www.pugpig.com
support10.cdnetworks.net
xlink.rsc.org
dns-vetting1j.map.fastly.net
ssl.cdngc.net
support10.cdnetworks.net
support10.cdnetworks.net
www.rsc.org
www.pugpig.com
au.credential.getsmarter.com
www.pugpig.com
support10.cdnetworks.net
dns-vetting1j.map.fastly.net
wvrsc.webvisioncloud.com
5654100301578240-fe4.pantheonsite.io
ssl.cdngc.net
5759826290278400-fe3.pantheonsite.io
dns-vetting1j.map.fastly.net
api.rsc.org
ssl.cdngc.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
5654100301578240-fe4.pantheonsite.io
ssl.cdngc.net
www.pugpig.com
adnoncentaur5.abasoft.co.uk
ssl.cdngc.net
aonhrlearningcenter.credentials.aon.com
incapsula.com
support10.cdnetworks.net
support10.cdnetworks.net
ssl.cdngc.net
support10.cdnetworks.net
brand.rsc.org
spectraschool.rsc.org
wvfe2.webvisioncloud.com
ssl.cdngc.net
ssl.cdngc.net
dns-vetting1j.map.fastly.net
5654100301578240-fe4.pantheonsite.io
5654100301578240-fe4.pantheonsite.io
incapsula.com
support10.cdnetworks.net
support10.cdnetworks.net
support10.cdnetworks.net
5654100301578240-fe4.pantheonsite.io
dns-vetting1j.map.fastly.net
adnoncentaur5.abasoft.co.uk
www.pugpig.com
support10.cdnetworks.net
support10.cdnetworks.net
www.pugpig.com
dns-vetting1j.map.fastly.net
ssl.cdngc.net
jobs.chemistryworld.com
www.rsc.org
5759826290278400-fe3.pantheonsite.io
support10.cdnetworks.net
merckindex.rsc.org
support10.cdnetworks.net
support10.cdnetworks.net
support10.cdnetworks.net
affinitydevelopment.rsc.org
ssl.cdngc.net
ssl.cdngc.net
5759826290278400-fe3.pantheonsite.io
dns-vetting1j.map.fastly.net
support10.cdnetworks.net
rscweb.org
incapsula.com
dns-vetting1j.map.fastly.net
ssl.cdngc.net
dns-vetting1j.map.fastly.net
api.rsc.org
5654100301578240-fe4.pantheonsite.io
support10.cdnetworks.net
www.pugpig.com
dns-vetting1j.map.fastly.net
5654100301578240-fe4.pantheonsite.io
support10.cdnetworks.net
ssl.cdngc.net
ssl.cdngc.net
brand.rsc.org
www.pugpig.com
adnoncentaur4-5.abasoft.co.uk
incapsula.com
5759826290278400-fe3.pantheonsite.io
5759826290278400-fe3.pantheonsite.io
support10.cdnetworks.net
ssl.cdngc.net
ssl.cdngc.net
dns-vetting1j.map.fastly.net
support10.cdnetworks.net
adnoncentaur4-5.abasoft.co.uk
*.content.pugpig-dev.com
dns-vetting1j.map.fastly.net
5654100301578240-fe4.pantheonsite.io
events.rsc.org
wvfe1.webvisioncloud.com
dns-vetting1.map.fastly.net

Certificate

The complete raw certificate details for www.rsc.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEU2LXTp40xS2/wV2bHS7JRxgfilmB
WOm0wcRWlaHTuuwfIgG6CE5L8B9oF0Z9JPUEij5XnGh/NcenLajx372c+w==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3939532668585536374352792556818601097
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS ECC CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambridge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Royal Society of Chemistry'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rsc.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00045362d74e9e34c52dbfc15d9b1d2ec947181f8a598158e9b4c1c45695a1d3baec1f2201ba084e4bf01f6817467d24f5048a3e579c687f35c7a72da8f1dfbd9cfb
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd82cf477b1e8c2285fe8ca81fc3e1b2dffda699
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							69c02bcbe79d60949d673baa7ebf54b9421bd649
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carousel.rsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saww.rsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubs.rsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shib.rsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectraschool.rsc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSECCCAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSECCCAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256)
 . . . . [c:0|t:3|false] BIT STRING (576 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 71252824964444473695513819929657877032222653747901727722391794443484799615026
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 104617013388877376031885445217298367596088357270786155319367172588438582564621