api.ocp4.azure.dso.digital.mod.uk

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number 6e:54:2f:55:ed:61:2e:fc:1c:34:8a:bf:b5:4c:3e was issued on by ZeroSSL.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.ocp4.azure.dso.digital.mod.uk

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate has expire since

Certificate Details

Serial Number (hex): 6e:54:2f:55:ed:61:2e:fc:1c:34:8a:bf:b5:4c:3e
Serial Number (int): 572860127162376140206349531556957246
Serial Number lenght: 119 bits, 15 octets

SubjectKeyId: 51:04:74:1f:e4:19:b9:c0:3d:8a:15:a5:83:91:ef:02:01:42:0e:dc
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): 77:bb:42:0e:e3:17:ff:41:20:60:c8:be:13:8a:5f:0f:68:23:b8:ca
Fingerprint (sha256): 05:b3:8b:6c:3d:11:c1:02:f7:0c:56:e2:f0:50:dc:13:9a:3d:bc:ec:72:28:31:26:6c:d2:58:c7:8e:63:21:13

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate api.ocp4.azure.dso.digital.mod.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.ocp4.azure.dso.digital.mod.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.ocp4.azure.dso.digital.mod.uk

Other certificates including the domain name mod.uk

(limited to 100 certificates)
*.dgwmail.mod.uk
test.asems.mod.uk
indirect.public.mod.uk
helpdesk.defencegateway.mod.uk
staging-recruitment.raf.mod.uk
api.ocp1.azure.dso.digital.mod.uk
admin-app.conor.fieldreport.digital.mod.uk
sba.mod.uk
ems.ahe.mod.uk
api.ocp3.azure.dso.digital.mod.uk
asems.mod.uk
www.armynet.mod.uk
www.raf.mod.uk
vle.rmasandhurst.mod.uk
jive.defencegateway.mod.uk
dc.mod.uk
mod.uk
*.defencegateway.mod.uk
mta-sts.rafac.mod.uk
testfotoweb.royalnavy.mod.uk
mod.uk
tfs.royalnavy.mod.uk
qbp.army.mod.uk
api.ocp4.azure.dso.digital.mod.uk
clms.mod.uk
vle.rmasandhurst.mod.uk
chatbot-frontend-staging.royalnavy.mod.uk
www.mafis.mod.uk
atga.mod.uk
bader.mod.uk
*.defencegateway.mod.uk
www.da.mod.uk
monitoring.stage.r2d2.alpha.digital.mod.uk
emsgw.mod.uk
www.asems.mod.uk
mod.uk
*.bader.mod.uk
armycms.mod.uk
www.asems.mod.uk
dcdc.mod.uk
www.defenceshare.mod.uk
staging.cgo.mod.uk
*.apps.ocp1.azure.dso.digital.mod.uk
api.ocp2.azure.dso.digital.mod.uk
*.dasa.service.mod.uk
sni.cloudflaressl.com
www.defencebrandportal.mod.uk
www.dne-careerhub.defencegateway.mod.uk
des.mod.uk
dle.mod.uk
api.ocp4.azure.dso.digital.mod.uk
t.recruitment-campaigns.mod.uk
www.atga.mod.uk
sba.mod.uk
mod.uk
www.atga.mod.uk
mod.uk
vle.rmasandhurst.mod.uk
backoffice.tom.fieldreport.digital.mod.uk
api.ocp3.azure.dso.digital.mod.uk
doctrine.mod.uk
qbp.army.mod.uk
armymail.mod.uk
testcontracts.mod.uk
api.ocp3.azure.dso.digital.mod.uk
staging-recruitment.raf.mod.uk
rcds-extranet.mod.uk
foundry.digital.mod.uk
api.ocp2.azure.dso.digital.mod.uk
www.armynet.mod.uk
mod.uk
intpg1.recruitment.mod.uk
register.byod.da.mod.uk
design-system.digital.mod.uk
asems.mod.uk
*.apps.ocp3.azure.dso.digital.mod.uk
www.armynet.mod.uk
army.mod.uk
jobs.raf.mod.uk
monitoring.stage.r2d2.alpha.digital.mod.uk
asems.mod.uk
design-system.navy.digital.mod.uk
www.asems.mod.uk
webexuser.learn.mod.uk
design-system.navy.digital.mod.uk
sni.cloudflaressl.com
mod.uk
hybrid.mod.gov.uk
www.nsv.mod.uk
www.bdfl.mod.uk
alumni.raf.mod.uk
cms.raf.mod.uk
dtt.cms.dlp.mod.uk
*.corpserv.mod.uk
monitoring.stage.r2d2.alpha.digital.mod.uk
*.defencegateway.mod.uk
mod.uk
api.alan.fieldreport.digital.mod.uk
mod.uk
servicemanual.digital.mod.uk

Certificate

The complete raw certificate details for api.ocp4.azure.dso.digital.mod.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm0VpD0tZ3Lxb7lkDYOc
hE0cgXnxZ+cn2ZJmnmlBsAgi7qGjFPZl2WL9pZdCinX9EOMUuI08kcvFzQMcfYmm
0IsUOWQFj1fLK8CnqsKdsp2qACHM/5I2+Rb+5kCJuUd9xNClWO31MyftE821GiOK
spW4+7A5/ixUlvODNNni0+BJSsypTASZeKQ/BwQyrKEaadbyuOXE8vRmQN6XLUlA
1eavxzTdtmC1qhCK9ox+hG/e+ThrNn6uRfpCEGpqeLSIWzMifavP3GP/nL1PSpv9
zE029oybVEXTaefcyaTr5Qy8VLsDPy2A6H4ItkLUijAM7BXoRflr1Ekgqmm7OHrq
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 572860127162376140206349531556957246
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.ocp4.azure.dso.digital.mod.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24544022753616694248819125701755653351297102214933443502562144170390253067120560552882447791154778044179942620283128441997816202360287673329347014702908598765876698501124877845667935578998579491254823870358009641017041302157462261042916233558043710140135042227275220341471588514739224653854237603735294625743077657113943924662175440437594451322711349177409501871634293655238450583197021800514770603707886975181334487755754251922493573143289567400936225466117404278626596260754691477737195252307149064904306703826236111593870497409902146547398799312423953226951528833322537406100547896201303698572164495184211702639111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5104741fe419b9c03d8a15a58391ef0201420edc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000018244520a0500000403004730450220576cb087a2d873c2d769cb8d491e12312d22c62bd070b433bd6f49f05603738c022100983c1807657a0ef056e65c8991aaa4b19026aabc8df63499145d9aef393f902800750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000018244520a690000040300463044022079bc147b1b4862c113bf9a9e9a954841b5cbf7b8a870d84724ec12370bfc98f2022033a9276d466b9f4e642f06ca9ec66534999e3a480e85f72fff0dae0caf27b001
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ocp4.azure.dso.digital.mod.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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