www.onesearchdirect.co.uk

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 07:c2:06:47:84:b6:83:45:6d:4c:14:85:c1:52:c9:e8 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.onesearchdirect.co.uk

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:c2:06:47:84:b6:83:45:6d:4c:14:85:c1:52:c9:e8
Serial Number (int): 10312028921779993799349779538979768808
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 7a:3c:f7:51:c0:1f:a5:8e:75:81:b1:6a:44:10:7a:54:7d:0d:42:b7
Fingerprint (sha256): 06:1b:58:b9:c8:54:e0:dd:1c:fb:7e:18:77:50:77:7b:02:33:c3:5e:63:8b:52:b8:3e:89:bc:76:4c:7a:57:09

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate www.onesearchdirect.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.onesearchdirect.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.onesearchdirect.co.uk
onesearchdirect.co.uk

Other certificates including the domain name onesearchdirect.co.uk

(limited to 100 certificates)
onesearch.direct
owa2.osdmail.net
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
onesearch.direct
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
onesearch.direct
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
pipe.onesearchdirect.co.uk
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
owa2.osdmail.net
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
owa.osdmail.net
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
leads.onesearchdirect.co.uk
www.onesearchdirect.co.uk
owa2.osdmail.net
owa2.osdmail.net
onesearch.direct
panel.onesearchdirect.co.uk
onesearch.direct
onesearch.direct
owa2.osdmail.net
www.onesearchdirect.co.uk
onesearch.direct
owa2.osdmail.net
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
pipe.onesearchdirect.co.uk
owa2.osdmail.net
onesearch.direct
owa2.osdmail.net
www.onesearchdirect.co.uk
leads.onesearchdirect.co.uk
onesearch.direct
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
owa.osdmail.net
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
owa2.osdmail.net
owa2.osdmail.net
owa2.osdmail.net
panel.onesearchdirect.co.uk
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
onesearch.direct
pipe.onesearchdirect.co.uk
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
owa2.osdmail.net
leads.onesearchdirect.co.uk
pipe.onesearchdirect.co.uk
leads.onesearchdirect.co.uk
pipe.onesearchdirect.co.uk
onesearch.direct
onesearch.direct
pipe.onesearchdirect.co.uk
owa2.osdmail.net
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
onesearch.direct
onesearch.direct
owa2.osdmail.net
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
onesearch.direct
onesearch.direct
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
portal.movinlegal.co.uk
onesearch.direct
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
owa2.osdmail.net
www.onesearchdirect.co.uk
www.onesearchdirect.co.uk
onesearch.direct

Certificate

The complete raw certificate details for www.onesearchdirect.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6sPOl8BtNLCZ88NE+UX
QZ24xAx9HJCriQSxTsxwc0nwrDUsQ/mdCEgnq8i1rtnfd2OEbWzSZnlOrmD7xV2f
QqT0G4VOfCZvKsNFGz9DYUVCulooBlAeFMRrxRfW7/XahMOHnfNidq2n4uEABSrM
T0X/eG8nzXWHQmkmsC0yktsDeLQYtik6WvsKoc+KTkQe5zmUuGFsV9GJGQ7gc4zo
LbZvCnzdt/U7TceWR1QSqqBL/jQZO/Wj3s1nB8Z2GWI3gUBdkjCJp0W5/7Ai7TD3
0UAPdhUffe7J+orwxEerDCWyi+jGfptofCQ4SddHQifkDkJO1kczrlaMRuT+mnm3
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10312028921779993799349779538979768808
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.onesearchdirect.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20156243065235654765552568595156666796977252069062487649676033322774262844138380349559877378655268162065956686581783624713795192666428643884645614301472005190114308517540629738244501991403119752702768131801351193588709765606260778959609623098300913041058485435084318293294792773413027507141713947582654288917025114873333674226047512393733046215393115610381455951985069211867274076216111493035935196710317339679497852423418218978565824022176296567673254034429369451251049160650522766193867877728117581256053040632234497449772167946163890673474339617703652980706508505672918594495471088536492379873083677820648687253451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onesearchdirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onesearchdirect.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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