apps-portal.chsgroup.org.uk

Issued by thawte DV SSL CA - G2

About this certificate

This digital certificate with serial number 1d:df:7b:40:d3:27:0c:65:ce:db:99:75:98:4a:c1:40 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=apps-portal.chsgroup.org.uk

thawte, Inc.

Organization: thawte, Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:df:7b:40:d3:27:0c:65:ce:db:99:75:98:4a:c1:40
Serial Number (int): 39707993949548020669445858969474744640
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 9f:b8:c1:a9:6c:f2:f5:c0:22:2a:94:ed:5c:99:ac:d4:ec:d7:c6:07

Fingerprint (sha1): eb:70:6c:88:ca:e2:09:31:0e:27:b3:2b:70:5a:22:8c:87:b5:36:30
Fingerprint (sha256): 03:5c:4d:9d:16:de:7f:6a:fc:52:1f:3c:bb:3c:03:87:b5:cc:bc:ef:6f:50:cf:36:e8:51:35:c9:a7:be:7b:e8

Issuing Certificate URL: http://tn.symcb.com/tn.crt

Revocation information

OCSP Server: http://tn.symcd.com
CRL Distribution Point: http://tn.symcb.com/tn.crl

Check the revocation status for certificate apps-portal.chsgroup.org.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apps-portal.chsgroup.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apps-portal.chsgroup.org.uk

Other certificates including the domain name chsgroup.org.uk

(limited to 100 certificates)
suport.staff.utcluj.app
www.chsgroup.org.uk
apps-portal.chsgroup.org.uk
support.ecctis.com
chsadmin.chsgroup.org.uk
apps-portal.chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
support.tuxexpert.com
support.ecctis.com
servicedesk.cheaperwaste.co.uk
newsletter.chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
ithelpdesk.uteco.com
chsgroup.org.uk
sd.sch1584.su
portal.chsgroup.org.uk
chsgroup.org.uk
chsgroup.org.uk
newsletter.chsgroup.org.uk
support-services.gruener-punkt.de
portal.chsgroup.org.uk
servicedesk.quorumdev.com
portal.chsgroup.org.uk
www.chsgroup.org.uk
dsi.alivetravel.com
suport.staff.utcluj.app
www.chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
portal.chsgroup.org.uk
chsgroup.org.uk
helpdesk.zultys.com
sd.sch1584.su
support-services.gruener-punkt.de
support.tuxexpert.com
apps-portal.chsgroup.org.uk
chsgroup.org.uk
www.chsgroup.org.uk
apps-portal.chsgroup.org.uk
helpdesk.derbigum.com
support-services.gruener-punkt.de
servicedesk.quorumdev.com
ithelpdesk.uteco.com
www.chsgroup.org.uk
gateway.cambridgehs.org.uk
techteam.awayresorts.co.uk
portal.chsgroup.org.uk
chsgroup.org.uk
support.gjesdal.kommune.no
ithelpdesk.uteco.com
ithelpdesk.uteco.com
dsi.alivetravel.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
gateway.chsgroup.org.uk
portal.chsgroup.org.uk
chsgroup.org.uk
chsgroup.org.uk
chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
portal.chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
chsgroup.org.uk
support-services.gruener-punkt.de
helpdesk.derbigum.com
portal.chsgroup.org.uk
servicedesk.chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
chsgroup.org.uk
chsadmin.chsgroup.org.uk
dr-apps-portal.chsgroup.org.uk
suport.staff.utcluj.app
portal.chsgroup.org.uk
newsletter.chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
portal.chsgroup.org.uk
sd.sch1584.su
chsgroup.org.uk
helpdesk.pgzinternational.com
techteam.awayresorts.co.uk
portal.chsgroup.org.uk
newsletter.chsgroup.org.uk
portal.chsgroup.org.uk
www.chsgroup.org.uk
support.languagelink.ru
servicedesk.cheaperwaste.co.uk
chsgroup.org.uk
portal.chsgroup.org.uk
servicemanager.loacker.com
chsgroup.org.uk
chsgroup.org.uk
sd.sch1584.su
itservicedesk.eu.anritsu.com
chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
www.chsgroup.org.uk
servicedesk.solidsolutions.co.uk
helpdesk.zultys.com

Certificate

The complete raw certificate details for apps-portal.chsgroup.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqkKndp045azMtu2bqxs
bvi4ogfFfzaPv2I8x98ZgTbp89UpmRadDOdzd/dkXnKJnEtfn/6ZFU1fw3BpXB7k
mKhfBEDqV3vv79zwoFlj9DInv0pmjpGZ5H3mAlAC0BTrZM7zQTQ+HUcseAqMEdP8
h1BUXpbiZPl+KjC4LUJow/BE7pzgpp0o541s63gitbCu7uuEBhHZQ1kVXI3g9NQx
iLm0Y6IbaPkELdbscnBN2/UjIrKbbDje1+2aWMD+YW3S1X0QitynVxlua21O8hMu
MKchTC8nAsxBum5ZouRnK68RwUtpsGeoLaDk2g+jFSsUyA6FZQpU0zSyvqTMe9Mu
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 39707993949548020669445858969474744640
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte DV SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'apps-portal.chsgroup.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21543869300429418394749722670929952556507773949550452566246481397418879703256954656181659614628817763456102499052989543927963568803752605920491846493153029274462516285004162176967696307980050933101152863163139465758837036375161272866919749554101542665084902874234189594304625841171648553640742526115445683706868842599182769406268694520279647803460983147799261612853735268399537720016133615472565378509254565339443907414933157046610361714832100056752401158754036739845692703048726337143029875981580346106579888793786600310054441703731351918791417646473043716791678318658985541525514796831028239452937894578325401317053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps-portal.chsgroup.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcb.com/tn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9fb8c1a96cf2f5c0222a94ed5c99acd4ecd7c607
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcb.com/tn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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