x3.southbankcentre.co.uk

- Southbank Centre -

Issued by thawte SHA256 SSL CA

About this certificate

This digital certificate with serial number 7e:46:04:fd:ed:46:07:09:16:06:f4:c9:16:9a:54:01 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Southbank Centre

Organization: Southbank Centre
State / Province: London
Locality: London
Country: GB

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7e:46:04:fd:ed:46:07:09:16:06:f4:c9:16:9a:54:01
Serial Number (int): 167846289496792973994641038438097900545
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14

Fingerprint (sha1): 7d:65:62:21:69:18:02:36:ae:c4:67:17:42:4f:fc:01:64:a3:a7:80
Fingerprint (sha256): 0e:f3:cb:03:d7:d8:31:6a:7c:1f:8e:19:f0:d1:66:d6:1c:45:b4:a5:2d:30:03:ca:e5:b1:c9:f2:a9:bc:e1:d3

Issuing Certificate URL: http://tg.symcb.com/tg.crt

Revocation information

OCSP Server: http://tg.symcd.com
CRL Distribution Point: http://tg.symcb.com/tg.crl

Check the revocation status for certificate x3.southbankcentre.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for x3.southbankcentre.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

x3.southbankcentre.co.uk

Other certificates including the domain name southbankcentre.co.uk

(limited to 100 certificates)
platformsh.map.fastly.net
secure-euwe1-1.tessituranetwork.com
*.southbankcentre.co.uk
secure-euwe1-1.tessituranetwork.com
securessl-eu.tessituranetworkhost.com
ssl391556.cloudflaressl.com
securessl-eu.tessituranetworkhost.com
shop.southbankcentre.co.uk
tls.automattic.com
platformsh.map.fastly.net
platformsh.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
platformsh.map.fastly.net
ssl365218.cloudflaressl.com
platformsh.map.fastly.net
tls.automattic.com
mb.logicside.net
unlimited.southbankcentre.co.uk
platformsh.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
securessl-eu.tessituranetworkhost.com
x3.southbankcentre.co.uk
*.southbankcentre.co.uk
securessl-eu.tessituranetworkhost.com
platformsh.map.fastly.net
securessl-eu.tessituranetworkhost.com
dns-vetting1-marita-ardnek.map.fastly.net
platformsh.map.fastly.net
ssl365217.cloudflaressl.com
collections.southbankcentre.co.uk
securessl-eu.tessituranetworkhost.com
shop.southbankcentre.co.uk
*.southbankcentre.co.uk
ssl365218.cloudflaressl.com
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
securessl-eu.tessituranetworkhost.com
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
securessl-eu.tessituranetworkhost.com
*.southbankcentre.co.uk
platformsh.map.fastly.net
platformsh.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
*.southbankcentre.co.uk
resetpassword.gumb.app
dns-vetting1-marita-ardnek.map.fastly.net
unlimited.southbankcentre.co.uk
bynder.southbankcentre.co.uk
recruit.southbankcentre.co.uk
bynder.southbankcentre.co.uk
ammarweb.org
tls.automattic.com
bynder.southbankcentre.co.uk
platformsh.map.fastly.net
recruit.southbankcentre.co.uk
*.southbankcentre.co.uk
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
securessl-eu.tessituranetworkhost.com
dns-vetting1-marita-ardnek.map.fastly.net
securessl-eu.tessituranetworkhost.com
secure-euwe1-1.tessituranetwork.com
securessl-eu.tessituranetworkhost.com
platformsh.map.fastly.net
ssl365216.cloudflaressl.com
securessl-eu.tessituranetworkhost.com
platformsh.map.fastly.net
platformsh.map.fastly.net
unlimited.southbankcentre.co.uk
secure-euwe1-1.tessituranetwork.com
platformsh.map.fastly.net
*.southbankcentre.co.uk
totalrecalldts.co.uk
tls.automattic.com
shop.southbankcentre.co.uk
southbank.afterdigital.io
platformsh.map.fastly.net
x3.southbankcentre.co.uk
platformsh.map.fastly.net
platformsh.map.fastly.net
ssl365217.cloudflaressl.com
dns-vetting1-marita-ardnek.map.fastly.net
46thpreston.org.uk
dns-vetting1-marita-ardnek.map.fastly.net
ssl391555.cloudflaressl.com
southbank.afterdigital.io
unlimited.southbankcentre.co.uk
*.southbankcentre.co.uk
applications.southbankcentre.co.uk
platformsh.map.fastly.net
recruit.southbankcentre.co.uk

Certificate

The complete raw certificate details for x3.southbankcentre.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42fzN788ZoLf8ZVb28+N
bupaZ47he3FxjjzJElXKrgQiYcyclNuRlY1jhpYJc9mj1GlGSOT6EsN0lJg8LZ+Y
gzvG5HurDlkBiFE3E+okcaDIL9CX2eXky5NOMrE90FjTL+koRxU2QIGC7YhJWaHV
J4JWfmJ6vwy/Y987daVGj7haYz+UpaeZmOpdN/J21fTVXlUS5rPphv7HcDzeyu1L
OuITAcIQJYvgmFeBL3qheFZRaSKLFEgiY0+XNexUDvcfkGHtBISmkGkEZWrLzdZB
mEpqWyVyiLWfOV5dqrjQUj2UrpO9Wn5ywar/pF2y3x59ELlyLHXR19OUfKQcfbXB
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 167846289496792973994641038438097900545
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Southbank Centre'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'x3.southbankcentre.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28707354916982343927087857274558759090376658657778834965846983569990020054114550578212805973175094635390899096999853746090819539573054875239076058846729362029523166295854728470512899691762150730174002864858766060109511058314895347224427860897486178015398733827011413223262059579632411776659327793032401026731950348530038574736661840499658468360644417465751608946473047055364556939946392983401291787691763830881683781177181702085159131711727487013290546029787330246492193411749910748220003833062679244328512427884573273914836136591930291310234940596002400989066312226633763437500046987455713317004398482588909859881243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x3.southbankcentre.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2b9a35ae01183830e1707a05e01176a3cebd9014
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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