affinitydevelopment.rsc.org

- Royal Society of Chemistry -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 08:72:a4:93:9b:3a:10:ba:92:5f:02:4e:b1:4a:9e:cf was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Royal Society of Chemistry

Organization: Royal Society of Chemistry
Organization unit: Technology
Locality: Cambridge
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:72:a4:93:9b:3a:10:ba:92:5f:02:4e:b1:4a:9e:cf
Serial Number (int): 11229083817907559023041495822049648335
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d2:f7:58:c6:4d:0a:6e:69:42:e8:7f:4c:cf:d7:28:de:9c:ac:13:0f
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 58:6e:70:e3:5e:e6:8b:a4:6e:97:5e:82:50:43:f8:5a:34:dc:bc:96
Fingerprint (sha256): 0c:6b:99:32:72:1d:b0:70:e9:38:ab:9d:63:fa:76:5f:4c:ef:83:4f:e7:ed:25:b9:e7:f8:87:70:79:0b:07:a6

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate affinitydevelopment.rsc.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for affinitydevelopment.rsc.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

affinitydevelopment.rsc.org

Other certificates including the domain name rsc.org

(limited to 100 certificates)
www.pugpig.com
support10.cdnetworks.net
xlink.rsc.org
dns-vetting1j.map.fastly.net
ssl.cdngc.net
support10.cdnetworks.net
support10.cdnetworks.net
www.rsc.org
www.pugpig.com
au.credential.getsmarter.com
www.pugpig.com
support10.cdnetworks.net
dns-vetting1j.map.fastly.net
wvrsc.webvisioncloud.com
5654100301578240-fe4.pantheonsite.io
ssl.cdngc.net
5759826290278400-fe3.pantheonsite.io
dns-vetting1j.map.fastly.net
api.rsc.org
ssl.cdngc.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
5654100301578240-fe4.pantheonsite.io
ssl.cdngc.net
www.pugpig.com
adnoncentaur5.abasoft.co.uk
ssl.cdngc.net
aonhrlearningcenter.credentials.aon.com
incapsula.com
support10.cdnetworks.net
support10.cdnetworks.net
ssl.cdngc.net
support10.cdnetworks.net
brand.rsc.org
spectraschool.rsc.org
wvfe2.webvisioncloud.com
ssl.cdngc.net
ssl.cdngc.net
dns-vetting1j.map.fastly.net
5654100301578240-fe4.pantheonsite.io
5654100301578240-fe4.pantheonsite.io
incapsula.com
support10.cdnetworks.net
support10.cdnetworks.net
support10.cdnetworks.net
5654100301578240-fe4.pantheonsite.io
dns-vetting1j.map.fastly.net
adnoncentaur5.abasoft.co.uk
www.pugpig.com
support10.cdnetworks.net
support10.cdnetworks.net
www.pugpig.com
dns-vetting1j.map.fastly.net
ssl.cdngc.net
jobs.chemistryworld.com
www.rsc.org
5759826290278400-fe3.pantheonsite.io
support10.cdnetworks.net
merckindex.rsc.org
support10.cdnetworks.net
support10.cdnetworks.net
support10.cdnetworks.net
affinitydevelopment.rsc.org
ssl.cdngc.net
ssl.cdngc.net
5759826290278400-fe3.pantheonsite.io
dns-vetting1j.map.fastly.net
support10.cdnetworks.net
rscweb.org
incapsula.com
dns-vetting1j.map.fastly.net
ssl.cdngc.net
dns-vetting1j.map.fastly.net
api.rsc.org
5654100301578240-fe4.pantheonsite.io
support10.cdnetworks.net
www.pugpig.com
dns-vetting1j.map.fastly.net
5654100301578240-fe4.pantheonsite.io
support10.cdnetworks.net
ssl.cdngc.net
ssl.cdngc.net
brand.rsc.org
www.pugpig.com
adnoncentaur4-5.abasoft.co.uk
incapsula.com
5759826290278400-fe3.pantheonsite.io
5759826290278400-fe3.pantheonsite.io
support10.cdnetworks.net
ssl.cdngc.net
ssl.cdngc.net
dns-vetting1j.map.fastly.net
support10.cdnetworks.net
adnoncentaur4-5.abasoft.co.uk
*.content.pugpig-dev.com
dns-vetting1j.map.fastly.net
5654100301578240-fe4.pantheonsite.io
events.rsc.org
wvfe1.webvisioncloud.com
dns-vetting1.map.fastly.net

Certificate

The complete raw certificate details for affinitydevelopment.rsc.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXIc+cabJa2gBfaw3vv/
Ww+0sJudRrTHyGEBdzjLgcGIB5Osj5PxYL047JSF0Jo8pe7Z4zFdTxNcwKKJyCxo
GQyrBT80VLuQnfUFSkM9zk4Co+1QqAR45F/zhKO4UiP6zdSXzff+CxREYoIW+uI8
mGGKyiyEvrLxIlbdOUGu8PM7/TkqE1KJujOlU1C1n824dyt7exBZn0c89I117gDP
xke0Mp9vGcv0EzOezN9jj90g/4uh+wPYJ3cBh+8PQ0ZrvRh2lHsXsnr6jLX5HcXI
P33cAQBANjhNezYu78u6xhWQkvTtlZo0jTjiVwRaFNd0ItN/z1XAge3xGhsJH8rE
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11229083817907559023041495822049648335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambridge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Royal Society of Chemistry'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'affinitydevelopment.rsc.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24925217387726824541903709794316892596823065988312247156906262480293608708640193161945302032112704017477074687949628553897814467444776833164640578206821084634890267910431001156257181930662897793373385471331909850447752252879965876934973671213231786521107159689919555808619159373105436752189679301876401759850699141012508758080392636592906294808977977339322459401920160623327206580904532637983478929900178947779437384346301984252485956986847171738585062142767617627624910430352030558224969383933298874998318789273208763501229519805008140834943056077336088682775551957450877861638748296989051275739448031349014040069347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2f758c64d0a6e6942e87f4ccfd728de9cac130f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affinitydevelopment.rsc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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