api.ocp3.azure.dso.digital.mod.uk

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number 1a:f6:ea:0e:fa:45:5e:e1:20:47:15:01:23:a2:89:24 was issued on by ZeroSSL.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.ocp3.azure.dso.digital.mod.uk

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate has expire since

Certificate Details

Serial Number (hex): 1a:f6:ea:0e:fa:45:5e:e1:20:47:15:01:23:a2:89:24
Serial Number (int): 35841980188104026374879749383439681828
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 8a:a1:16:cf:df:0d:32:18:59:0c:38:45:fd:20:32:ad:b8:b8:26:0d
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): 5b:58:1b:7b:e9:9d:66:e1:1c:c7:89:de:11:2d:01:a6:83:26:07:7a
Fingerprint (sha256): 06:af:71:b6:f3:bc:a4:e7:df:bb:03:1c:5b:a6:ac:3b:6a:81:c3:29:c9:15:66:ff:fe:77:f1:ef:39:b2:51:23

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate api.ocp3.azure.dso.digital.mod.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.ocp3.azure.dso.digital.mod.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.ocp3.azure.dso.digital.mod.uk

Other certificates including the domain name mod.uk

(limited to 100 certificates)
*.dgwmail.mod.uk
test.asems.mod.uk
indirect.public.mod.uk
helpdesk.defencegateway.mod.uk
staging-recruitment.raf.mod.uk
api.ocp1.azure.dso.digital.mod.uk
admin-app.conor.fieldreport.digital.mod.uk
sba.mod.uk
ems.ahe.mod.uk
api.ocp3.azure.dso.digital.mod.uk
asems.mod.uk
www.armynet.mod.uk
www.raf.mod.uk
vle.rmasandhurst.mod.uk
jive.defencegateway.mod.uk
dc.mod.uk
mod.uk
*.defencegateway.mod.uk
mta-sts.rafac.mod.uk
testfotoweb.royalnavy.mod.uk
mod.uk
tfs.royalnavy.mod.uk
qbp.army.mod.uk
api.ocp4.azure.dso.digital.mod.uk
clms.mod.uk
vle.rmasandhurst.mod.uk
chatbot-frontend-staging.royalnavy.mod.uk
www.mafis.mod.uk
atga.mod.uk
bader.mod.uk
*.defencegateway.mod.uk
www.da.mod.uk
monitoring.stage.r2d2.alpha.digital.mod.uk
emsgw.mod.uk
www.asems.mod.uk
mod.uk
*.bader.mod.uk
armycms.mod.uk
www.asems.mod.uk
dcdc.mod.uk
www.defenceshare.mod.uk
staging.cgo.mod.uk
*.apps.ocp1.azure.dso.digital.mod.uk
api.ocp2.azure.dso.digital.mod.uk
*.dasa.service.mod.uk
sni.cloudflaressl.com
www.defencebrandportal.mod.uk
www.dne-careerhub.defencegateway.mod.uk
des.mod.uk
dle.mod.uk
api.ocp4.azure.dso.digital.mod.uk
t.recruitment-campaigns.mod.uk
www.atga.mod.uk
sba.mod.uk
mod.uk
www.atga.mod.uk
mod.uk
vle.rmasandhurst.mod.uk
backoffice.tom.fieldreport.digital.mod.uk
api.ocp3.azure.dso.digital.mod.uk
doctrine.mod.uk
qbp.army.mod.uk
armymail.mod.uk
testcontracts.mod.uk
api.ocp3.azure.dso.digital.mod.uk
staging-recruitment.raf.mod.uk
rcds-extranet.mod.uk
foundry.digital.mod.uk
api.ocp2.azure.dso.digital.mod.uk
www.armynet.mod.uk
mod.uk
intpg1.recruitment.mod.uk
register.byod.da.mod.uk
design-system.digital.mod.uk
asems.mod.uk
*.apps.ocp3.azure.dso.digital.mod.uk
www.armynet.mod.uk
army.mod.uk
jobs.raf.mod.uk
monitoring.stage.r2d2.alpha.digital.mod.uk
asems.mod.uk
design-system.navy.digital.mod.uk
www.asems.mod.uk
webexuser.learn.mod.uk
design-system.navy.digital.mod.uk
sni.cloudflaressl.com
mod.uk
hybrid.mod.gov.uk
www.nsv.mod.uk
www.bdfl.mod.uk
alumni.raf.mod.uk
cms.raf.mod.uk
dtt.cms.dlp.mod.uk
*.corpserv.mod.uk
monitoring.stage.r2d2.alpha.digital.mod.uk
*.defencegateway.mod.uk
mod.uk
api.alan.fieldreport.digital.mod.uk
mod.uk
servicemanual.digital.mod.uk

Certificate

The complete raw certificate details for api.ocp3.azure.dso.digital.mod.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvL8rFu2z1mq+eDHpHdN
eywUGncxRqzcx+xXCvYau5s/Jj9mMWiZz0BYly5YNkx1mx23yYr5u6nfhW9DmkD+
t1ST2HUP0unNPm6XdTcQ7tDc6Ig9DTaUjFsbIxIRNNAqo2jlyGE9tA3FJXdq4SKJ
wVGx2z5UPygWYICjOuYA6bMpNDGdR9MhlcyPE+/Fw3D9bsWYp7nyJ66h6N2BA4x7
Vbg523nxPR4sFinLKJDvr5OU0nxLzHnQJdX+brNQ71pNzz0tU227n7Ya5c/wLLpN
0HMXooUU/4K9F1gV3xvscH0XjJBWDcoKhrTe+LLMtwvaZLPX642XjbvhEdmqpC5c
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35841980188104026374879749383439681828
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.ocp3.azure.dso.digital.mod.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26124912180966046869685598167322633142486554181500786077029123477266906119056164533390317933023928108856004409563165745916168207924346490358595815840739724134020285183130897315047472662935706792309274597395834450586756891882560221376697105757129519601495819568303971480941786424828801911106863196603168291146584106222474837538780999425169942769928510775640554083814760088440444785974191937108281930711008722186705977971157782326314083177245786733114224011968969696734466705842500554213488844800666028889782239162514001457725766997431685859172172220770537743872897586369091448590331017417788556385548471505789547076727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8aa116cfdf0d3218590c3845fd2032adb8b8260d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000182da63a6db000004030047304502203066d6db8093a4d86cd817447108acaaf3393209bcb06a6e49e0674c7a09db94022100be6e055acabdc06ad529eeb23a72e42345c65044453acc95335e87e3dc137c2800760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000182da63a6e90000040300473045022100f461cd67c0e0061389ed751fdd41021cee6b0734c264ec13d581d1d5208701f002203d15193569b79ec7e5a6edc19d4f2038a1b93434e119eff58f1ddc8466d99fa6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ocp3.azure.dso.digital.mod.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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