detail-resources.dimensions.co.uk

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0f:ea:f7:2e:d8:5d:04:77:21:4e:f6:b5:b9:3c:41:54 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=detail-resources.dimensions.co.uk

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:ea:f7:2e:d8:5d:04:77:21:4e:f6:b5:b9:3c:41:54
Serial Number (int): 21158430868299678687050784838942212436
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ad:95:bf:d9:1f:ff:65:2c:f5:f7:9d:3b:5f:7e:9f:8d:a5:13:10:0b
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 0b:c8:a4:ce:90:c9:41:48:21:f4:78:e5:f8:1d:2b:ec:80:3e:3f:7d
Fingerprint (sha256): 04:b5:1b:ea:cc:62:8d:ba:1d:dc:88:95:2a:95:55:a2:c1:37:cc:4a:0b:02:4f:32:15:8d:36:f5:fb:7c:36:0a

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate detail-resources.dimensions.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for detail-resources.dimensions.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

detail-resources.dimensions.co.uk

Other certificates including the domain name dimensions.co.uk

(limited to 100 certificates)
detail-resources-shared.dimensions.co.uk
detail-resources.dimensions.co.uk
dimensions.co.uk
dimensions.co.uk
detail-resources.dimensions.co.uk
dimensions.co.uk
dimensions.co.uk
webmail.alexandra.co.uk
dimensions.co.uk
detail-resources-shared.dimensions.co.uk
dimensions.co.uk
dimensions.co.uk
*.dimensions.co.uk
detail.dimensions.co.uk
dimensions.co.uk
webmail.dimensions.co.uk
webmail.dimensions.co.uk
boots-resources.dimensions.co.uk
dimensions.co.uk
dimensions.co.uk
detail.dimensions.co.uk
dimensions.co.uk
detail-resources-shared.dimensions.co.uk
dimensions.co.uk
*.dimensions.co.uk
dimensions.co.uk
dimensions.co.uk
dimensions.co.uk
dimensions.co.uk
dimensions.co.uk
dimensions.co.uk
dimensions.co.uk
webmail.dimensions.co.uk
dimensions.co.uk
boots-resources.dimensions.co.uk
webmail.alexandra.co.uk
dimensions.co.uk
dimensions.co.uk
dimensions.co.uk
boots-resources.dimensions.co.uk
dimensions.co.uk
dimensions.co.uk
dimensions.co.uk
dimensions.co.uk
dimensions.co.uk
dimensions.co.uk
webmail.dimensions.co.uk
dimensions.co.uk
dimensions.co.uk
detail.dimensions.co.uk

Certificate

The complete raw certificate details for detail-resources.dimensions.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEnl9dJmbmQo4mzaEp6H
FcPxwqd+YqmbdRx/opg/abWf4tFtEVpUgvkqhnChQ9NU5i3YoqXxcmwve5ZK7AGK
K17gEVerWY0uKpLXKKAgnd/1N6w8uHCeH6ENd5Y9XkzZALh++5S3xC2BA/ePtfF6
aUWTwQx/QPXHRrIrqn+i+0o6gAdfVh4wB7X7B8ASv+jOO0dDxotNoS3wSNY42OWA
HDP0TktFSpK2C8cWW8mCjzy6fCtBTihz6q5fJwmdMecx07k4ukvOkMotV99cL9Hr
9EBsKySb7XsWgmWxNlqr9O2eWqRhkQ4pVz/UNHYH+jkNuBrPSkynFXPT4pzuqQZv
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21158430868299678687050784838942212436
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'detail-resources.dimensions.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19224662955950646194850435957240344977418838514064185767604327437315124442924217705919105758804989734809418716332645563631078574541296364783982977823776378038120278893806935937592610864107061369124143829035235857538511015358939010983691500766771786669885413800716916327557011201584335932784363959427462570866917559038748047713733269195588084562525250360707161619735491639543684913200126630328800286789238490283759870316574366985879145045408052095697255601582967576037686299937386826681662488316924469137511594299523960521839207568244687836702530706941660899541136868990085063441074351493005186328152137323450101821361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad95bfd91fff652cf5f79d3b5f7e9f8da513100b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detail-resources.dimensions.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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