auth-stage.ciam.marksandspencer.com

Issued by R3

About this certificate

This digital certificate with serial number 03:47:83:7b:23:97:8c:e1:b8:22:d2:0d:fa:3c:2b:0f:0e:d3 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=auth-stage.ciam.marksandspencer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:47:83:7b:23:97:8c:e1:b8:22:d2:0d:fa:3c:2b:0f:0e:d3
Serial Number (int): 285671674088520184055624543202743291940563
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 48:02:34:d9:90:24:9b:00:49:95:e3:d6:03:9c:c4:fe:33:15:73:c9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 19:37:fb:83:78:59:98:43:89:33:a0:f4:c7:56:e1:99:3a:74:03:ed
Fingerprint (sha256): 0a:63:9b:7f:ab:db:ac:76:78:2c:f8:2b:80:55:c8:75:72:1e:08:71:92:d5:cc:bb:be:f8:f0:07:20:41:af:38

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate auth-stage.ciam.marksandspencer.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth-stage.ciam.marksandspencer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth-dev.ciam.marksandspencer.com
auth-stage.ciam.marksandspencer.com
bridge-dev.ciam.marksandspencer.com
bridge-stage.ciam.marksandspencer.com
consent-dev.ciam.marksandspencer.com
consent-stage.ciam.marksandspencer.com

Other certificates including the domain name marksandspencer.com

(limited to 100 certificates)
corporate.marksandspencer.com
va.marksandspencer.com
auth.ciam.marksandspencer.com
www7.marksandspencer.com
INDISSDIQA.MANDSINDIA.marksandspencer.com
p1escp21.unix.marksandspencer.com
flowersubscriptions.marksandspencer.com
help.marksandspencer.com
marksintime.marksandspencer.com
dev.comshub-msb.marksandspencer.com
adriatic.b2b.marksandspencer.com
msib-fileservice.marksandspencer.com
msib-fileservice.marksandspencer.com
webforms.marksandspencer.com
api-test.marksandspencer.com
dressipi-staging.marksandspencer.com
akamai-san7.exacttarget.com
stg1.dotcom.apps.mnscorpcate.net
sendgrid.trytuesday.com
msib-fileservice.marksandspencer.com
help.marksandspencer.com
dev.comshub-msb.marksandspencer.com
qa.dotcom.apps.mnscorpcate.net
mands.uk
alumni.marksandspencer.com
st.marksandspencer.com
foodmagazine.marksandspencer.com
suppliers.marksandspencer.com
www5.marksandspencer.com
esb.marksandspencer.com
corporder.marksandspencer.com
bra-fit-calculator-uat.marksandspencer.com
capture.marksandspencer.com
api-test.marksandspencer.com
api-sit1.marksandspencer.com
bra-fit-booking.marksandspencer.com
jobs.marksandspencer.com
auth-stage.ciam.marksandspencer.com
www7.marksandspencer.com
mci.bank.marksandspencer.com
cftobrochure.marksandspencer.com
jobs.marksandspencer.com
dev.comshub-msb.marksandspencer.com
comshub-msb.marksandspencer.com
api-stage.marksandspencer.com
alumni.marksandspencer.com
creditcardeligibilitycheck.marksandspencer.com
inforights.marksandspencer.com
webchat2.marksandspencer.com
sparkslive.marksandspencer.com
st.marksandspencer.com
auth-stage.ciam.marksandspencer.com
uat.comshub-msb.marksandspencer.com
sparkslive.marksandspencer.com
auth.ciam.marksandspencer.com
corporder.marksandspencer.com
mshsvn.marksandspencer.com
banklive.marksandspencer.com
supplierexchange1.marksandspencer.com
msib-fileservice.marksandspencer.com
hlxp00m0011.unix.marksandspencer.com
hkhmnshk2k8ftp1.marksandspencer.com
cdntm.marksandspencer.com
marksandspencer.app
flowersubscriptions.marksandspencer.com
flowersubscriptions.marksandspencer.com
mands.uk
www.vp.marksandspencer.com
www7.marksandspencer.com
archive.marksandspencer.com
dev.comshub-msb.marksandspencer.com
CSSMWPC.webapps.marksandspencer.com
akamai-san7.exacttarget.com
www.marksandspencer.com
bw-a-hbp.webapps.marksandspencer.com
partners.ruckusdev.ruckuswireless.com
dressipi-staging.marksandspencer.com
personalisedloanquote.marksandspencer.com
secure.scene7.com
marksandspencer.brandactif.com
mshfmmswebp0001.wintel.marksandspencer.com
BANK.MARKSANDSPENCER.COM
tracking.service.marksandspencer.com
personal-bank.marksandspencer.com
insuranceservicing.marksandspencer.com
stpaccess.marksandspencer.com
marksandspencer.app
personalised.marksandspencer.com
st.marksandspencer.com
mcp.dotcom.apps.mnscorpdev.net
lifeinsurance.marksandspencer.com
webforms.marksandspencer.com
auth-dev.ciam.marksandspencer.com
api-preprod.marksandspencer.com
prod1.dotcom.apps.mnscorp.net
alumni.marksandspencer.com
api.marksandspencer.com
www9.marksandspencer.com
mcp.dotcom.apps.mnscorp.net
bra-fit-booking.marksandspencer.com

Certificate

The complete raw certificate details for auth-stage.ciam.marksandspencer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV3ip30XJRa5EUhW9/+5
UmVfyR+1p4bW8eNVUhISJNfv5/1xrgZyUj6RDF/VR8O+iEevBl5vhFKP+18QL723
RYF6mRFLZBD3V0bIneucFCjf+oFG7AJZg9bBFfnDYiw4/2H0L3uVln7UxWjWozQS
zG5ajx/6RnQQJePWf7cmQiGm9Z9jTrpdwrdzJDkRfbX7a6OxqbgA1DuJLrKzObab
KKcourXGp2NUDryGFoYTevqb8Yi+4ITXqYNXvU8rBqoHoyJgACPz3BEfWPkKLiDY
xdHAK7fnVEbfi85ajgL/UlDClhCNhsYPTze14cqp2Fm3aK4+Gv/KuVSjGVRFDwGI
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285671674088520184055624543202743291940563
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-05 14:32:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-03 14:31:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth-stage.ciam.marksandspencer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23905336239129484479156781626883217742357051198746672171003204600782256850106982280978088192318043203893591935792368399152312504446033784931726488936761797528088979319328799214597888553568012854503151642211086461036971632237649756726004366138369444247009393480574809734890672600068707619573142852856253867024396761725475056663306510796476379069179932941794295775114438751042846658176393275088266572984152532907873268616473832778629587956915240635558062159883631587002835078244419252064263252766069106619264212170389366575331861921857268098240908712119350987292674988152374771956523945050421491067620055308847529691279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							480234d990249b004995e3d6039cc4fe331573c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (229 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-dev.ciam.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-stage.ciam.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge-dev.ciam.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge-stage.ciam.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent-dev.ciam.marksandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent-stage.ciam.marksandspencer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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