www.keytosuccess.education.gov.uk

- Department for Education -

Issued by Thawte SGC CA - G2

About this certificate

This digital certificate with serial number 30:ba:76:95:bd:ae:2e:27:99:6a:1d:e0:6b:5d:76:d4 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Department for Education

Organization: Department for Education
State / Province: London
Locality: London
Country: GB

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 30:ba:76:95:bd:ae:2e:27:99:6a:1d:e0:6b:5d:76:d4
Serial Number (int): 64771116201396123268968813853172135636
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): c7:34:b5:82:d8:21:77:4e:ae:0c:25:bb:f8:1b:57:7e:29:72:03:71
Fingerprint (sha256): 02:ec:92:49:d1:d8:da:fb:df:58:2b:37:ee:ba:89:6c:51:35:2e:f8:68:79:b4:24:d0:45:a4:8d:63:4b:d0:8e

Issuing Certificate URL: http://svr-sgc-aia.thawte.com/ThawteSGCG2.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-sgc-crl.thawte.com/ThawteSGCG2.crl

Check the revocation status for certificate www.keytosuccess.education.gov.uk

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.keytosuccess.education.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

4 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name education.gov.uk

(limited to 100 certificates)
ilsype.education.gov.uk
complete.education.gov.uk
fsm.education.gov.uk
cipdev.docs.platform.education.gov.uk
plan-your-grant.education.gov.uk
Pr-nndr-scanservice.education.gov.uk
Report-extremism.education.gov.uk
onlinecollections-preprod.education.gov.uk
manage-training-for-early-career-teachers.education.gov.uk
www.keytosuccess.education.gov.uk
operations.platform.education.gov.uk
education.gov.uk
oat-api-services-fcs.education.gov.uk
dev-api-customerengagement.platform.education.gov.uk
test.docs.platform.education.gov.uk
applyforerasmusgovernmentguarantee.education.gov.uk
pp-ws.lrs.education.gov.uk
ssl809275.cloudflaressl.com
traineeteacherportal-dv.education.gov.uk
consult.education.gov.uk
api-lrs.education.gov.uk
*.education.gov.uk
*.traineeships.education.gov.uk
dev-api-customerengagement.platform.education.gov.uk
idp.lrs.education.gov.uk
consult.education.gov.uk
schooljobs.education.gov.uk
publish-teacher-training-courses.education.gov.uk
findapprenticeshiptraining-api.apprenticeships.education.gov.uk
dms-information-exchange.education.gov.uk
section96.education.gov.uk
apim-ltm-api.apprenticeships.education.gov.uk
publish-teacher-training-courses.education.gov.uk
test-api-customerengagement.platform.education.gov.uk
ilsype.education.gov.uk
doat-web-operations-fcs.education.gov.uk
admin.apprenticeships.education.gov.uk
proxy.signin.education.gov.uk
approvals.providers.apprenticeships.education.gov.uk
api-services-fcs.education.gov.uk
teacherservices-pp.education.gov.uk
schoolexperience-staging.education.gov.uk
pp-lrs.education.gov.uk
consult.education.gov.uk
lrspaas-test08-idp.dev.lrs.education.gov.uk
apply-the-service-standard.education.gov.uk
lrs.education.gov.uk
traineeteacherportal.education.gov.uk
idp.lrs.education.gov.uk
idp.lrs.education.gov.uk
consult.education.gov.uk
transfers-api.apprenticeships.education.gov.uk
help.apprenticeships.education.gov.uk
www.ecs2.education.gov.uk
collectdatauat.education.gov.uk
www.keytosuccess.education.gov.uk
cmp-lrs.education.gov.uk
ur1-idp.lrs.education.gov.uk
test.docs.platform.education.gov.uk
nca-pr.education.gov.uk
lrspaas-test01.dev.lrs.education.gov.uk
sni1c3d7gl.wpc.edgecastcdn.net
signin.education.gov.uk
schoolexperience-ta-recruit.education.gov.uk
clauat.education.gov.uk
doat-api-services-fcs.education.gov.uk
dev-api-customerengagement.platform.education.gov.uk
fsm2.education.gov.uk
status.apprenticeships.education.gov.uk
forecasting-api.apprenticeships.education.gov.uk
apply-for-qts-in-england.education.gov.uk
studentbursary.education.gov.uk
*.industryplacementmatching.education.gov.uk
dfe-hradvice.education.gov.uk
teachingjobs.education.gov.uk
education.gov.uk
sfs-dev.dev.funding.education.gov.uk
signin.education.gov.uk
subscriptions.apprenticeships.education.gov.uk
mta-sts.service.education.gov.uk
tasks.apprenticeships.education.gov.uk
pensionsregulator-api.apprenticeships.education.gov.uk
efadatacollections-stg.education.gov.uk
*.dev.lrs.education.gov.uk
help-for-early-years-providers.education.gov.uk
collectdatauat.education.gov.uk
refdata.apprenticeships.education.gov.uk
proxy.signin.education.gov.uk
ssl809273.cloudflaressl.com
status.apprenticeships.education.gov.uk
api-calculate-funding.education.gov.uk
www.primaryassessmentgateway.education.gov.uk
www.onetoonetuitiondata.education.gov.uk
dataprovision.education.gov.uk
mailshe.education.gov.uk
consult.education.gov.uk
ilsype.education.gov.uk
dev-search.apprenticeships.education.gov.uk
notifications.apprenticeships.education.gov.uk
apim-apprv-api.apprenticeships.education.gov.uk

Certificate

The complete raw certificate details for www.keytosuccess.education.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozGK9gRfUX+kyfYQRffd
kNEGS+42Kw28ukVfEslmrQ4BBT3oOS1Rol0euXEt/K/0sZ6O6fV53HbpgN5iTFuE
Np2UlZlcWJjvHinjEJ/C2lp1S/TUS8/qtBvObnaBames+0hHJ69u24EUqkQzLJ8G
oOkxRRSMn3Wy3l8djawH3WKOU8fzs3nKv/qwKmkZaBR86YpHUwDhfZ8RS8DTzyaM
w4Z/FN0Pf3YypwRRYdsEMK9NlPJoygGWSm86hA73vfIRlJVqodHM87YsA78kLMvJ
BK4zqvEfhmCm1IeKs8MmxMF9dC6hI4Pz6RsmR9GHsw/6Wma6VZYPMOrKcbqeMd5b
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 64771116201396123268968813853172135636
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SGC CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-06-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-09-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Department for Education'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.keytosuccess.education.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20601274182781808982649871819546747171286105734179798884258225317420298814837074189451993677473650086090807633147567453905917825940835482588356627605183237451088190271557724728839581433301236565658278557304434190616847353661828137095368554152947706310883963325782594348651491525102808077277732476165047388744525234290621311437015186701790733661874460980173984583103355207794858836223240060772929572732025444214025080530785983738954686148228960201378381866908406316820080317499958810400607924448819386368640155993142994564939861079970926530927331490981137004922924340581820733275540507373980134331429906625197080730503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-sgc-crl.thawte.com/ThawteSGCG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-sgc-aia.thawte.com/ThawteSGCG2.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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