carecost.suffolk.gov.uk

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 84:c9:0b:cd:f4:d7:dc:04 was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=carecost.suffolk.gov.uk

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 84:c9:0b:cd:f4:d7:dc:04
Serial Number (int): 9568191862529317892
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 39:a1:a4:ed:f6:09:0a:71:7b:c0:f1:55:2a:b2:c8:e2:ba:8d:30:cd
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 1c:f9:66:6d:bf:3e:a8:c0:82:1a:02:93:30:dd:a4:64:bb:45:1d:19
Fingerprint (sha256): 0c:94:e0:3c:b3:2d:a1:d9:13:3c:49:f3:41:71:7c:9a:e6:26:b9:5a:71:9b:a1:53:a9:46:b8:c5:18:e6:ef:9c

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-4941.crl

Check the revocation status for certificate carecost.suffolk.gov.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for carecost.suffolk.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

carecost.suffolk.gov.uk
www.carecost.suffolk.gov.uk

Other certificates including the domain name suffolk.gov.uk

(limited to 100 certificates)
search.suffolk.gov.uk
mail.eadidom.com
www.suffolk.gov.uk
committeeminutes.suffolk.gov.uk
tsreport.suffolk.gov.uk
www.suffolk.gov.uk
beta.carecost.suffolk.gov.uk
askhr.suffolk.gov.uk
professional.suffolk.gov.uk
carecost.suffolk.gov.uk
Sfb-ext1.eadidom.com
tsreport.suffolk.gov.uk
beta.fire.suffolk.gov.uk
elections.suffolk.gov.uk
search.suffolk.gov.uk
portal.suffolk.gov.uk
heritage.suffolk.gov.uk
Sfb-ext1.eadidom.com
askhr.suffolk.gov.uk
infolink.suffolk.gov.uk
heritage.suffolk.gov.uk
askhr.suffolk.gov.uk
pandp.suffolk.gov.uk
beta.suffolk.gov.uk
schoolsreporting.suffolk.gov.uk
mail.eadidom.com
fire.suffolk.gov.uk
*.suffolk.gov.uk
mail.eadidom.com
Sfb-ext2.eadidom.com
access1.suffolk.gov.uk
access1.eadidom.com
elections.suffolk.gov.uk
fire.suffolk.gov.uk
fosterandadopt.suffolk.gov.uk
mail.lab.eadidom.com
elections.suffolk.gov.uk
access1.eadidom.com
index.suffolk.gov.uk
frsincidents.suffolk.gov.uk
ehchub.suffolk.gov.uk
schoolclosures.suffolk.gov.uk
access1.eadidom.com
mail.eadidom.com
Sfb-ext1.eadidom.com
*.suffolk.gov.uk
mail.eadidom.com
fire.suffolk.gov.uk
anycommsplus.suffolk.gov.uk
foi.suffolk.gov.uk
carecost.suffolk.gov.uk
access1.eadidom.com
mail.eadidom.com
eychecker.suffolk.gov.uk
Sfb-ext2.eadidom.com
pandp.suffolk.gov.uk
pensions.suffolk.gov.uk
askhr.suffolk.gov.uk
search.suffolk.gov.uk
beta.carecost.suffolk.gov.uk
Sfb-ext1.eadidom.com
schoolsmail.suffolk.gov.uk
schoolsmail.suffolk.gov.uk
anycommsplus.suffolk.gov.uk
Sfb-ext1.eadidom.com
heritage.suffolk.gov.uk
anycommsplus.suffolk.gov.uk
schoolclosures.suffolk.gov.uk
portal.suffolk.gov.uk
Sfb-ext1.eadidom.com
askhr.suffolk.gov.uk
*.suffolk.gov.uk
creeting-st-mary.suffolk.gov.uk
access1.eadidom.com
foi.suffolk.gov.uk
*.suffolk.gov.uk
beta.fire.suffolk.gov.uk
askhr.suffolk.gov.uk
access2.suffolk.gov.uk
secure.suffolk.gov.uk
access2.eadidom.com
itrent.suffolk.gov.uk
masdevportal.suffolk.gov.uk
creeting-st-mary.suffolk.gov.uk
hrselfservice.suffolk.gov.uk
askhr.suffolk.gov.uk
Sfb-ext2.eadidom.com
altairlive.suffolk.gov.uk
contact.suffolk.gov.uk
search.suffolk.gov.uk
frsincidents.suffolk.gov.uk
highwaysreporting.suffolk.gov.uk
access2.suffolk.gov.uk
access1.eadidom.com
fosterandadopt.suffolk.gov.uk
infolink.suffolk.gov.uk
access2.eadidom.com
creeting-st-mary.suffolk.gov.uk
Sfb-ext1.eadidom.com
pensions.suffolk.gov.uk

Certificate

The complete raw certificate details for carecost.suffolk.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q88CiYs2IdXTYOVg0sX
wEA+UQtr4xvxOF408qzBYcoUIY7KdoYP6YMtl/EPPjw2+1MYiE9XScQfh9cll5Un
xh5s0Mos+KJxivFf/X+evE8oZvNwj+48YPL1wH9EgGitM1tpzlhR1F9MPPgEmuDt
TcMk8sbIBvc5h9PU52JmMy3W0/DMQ7rwnHhC3mHluKktV+8tfa/1naPZ+/TJmtRr
roqK9nyosLNnwNeSNH2hU/PxoeZxgomrGotowYJlbL+2M+HFoOlEG//oK0v4hUlP
ocwco10MrRVrwcmufMI1X5+A/LlIrgl/R9035pUrIF6F0RNZWGlO+b+EcMyBmXhE
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9568191862529317892
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-18 22:17:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 22:17:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'carecost.suffolk.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26896271384438060290203859322678915957506959882997162525356695853105990976052643194038116034728993309912942523210463166617483764925261187625887855902600623685249250131993331563352861054391276917665404285209807499940494289483484742714724104567579899421938840264242455619904899234038263480868328515045458204780177908778298211324191193970607066743530038434925784323652609227485455326150378736422884219026669206413064537309060268191734599382653181625220941009502672495585196507054074321938703700593040345377028453966293384581050404212683267684678866883918794973779242711591981838387366740631372116848393896855598894957653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-4941.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carecost.suffolk.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carecost.suffolk.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39a1a4edf6090a717bc0f1552ab2c8e2ba8d30cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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