laa-check.ppb.dwp.gov.uk

- The Department for Work and Pensions -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 10:71:71:37:63:29:a2:e6:aa:b1:e0:99:2f:37:f2:ad:1f:ab:48:79 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Department for Work and Pensions

Organization: The Department for Work and Pensions
Organization unit: LAA
State / Province: London
Locality: London
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 10:71:71:37:63:29:a2:e6:aa:b1:e0:99:2f:37:f2:ad:1f:ab:48:79
Serial Number (int): 93873699076265622141777658573024035797914568825
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: b2:32:54:4d:75:e8:78:f7:d7:f6:dc:54:73:3d:64:19:c8:5c:8d:38
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): fa:c7:f1:9f:df:ac:e3:d1:d4:2d:56:dd:67:28:19:02:af:22:45:6b
Fingerprint (sha256): 10:c8:c9:14:a6:ee:05:ab:28:16:6b:eb:7a:2e:19:6a:97:47:8d:97:87:01:e8:02:89:80:b3:70:32:51:a0:00

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate laa-check.ppb.dwp.gov.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for laa-check.ppb.dwp.gov.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

laa-check.ppb.dwp.gov.uk

Other certificates including the domain name dwp.gov.uk

(limited to 100 certificates)
sip.dwp.gsi.gov.uk
stat-xplore.dwp.gov.uk
getstatepension.dwp.gov.uk
*.atw.health.dwp.gov.uk
support.findajobstage.dwp.gov.uk
secureies.dwp.gov.uk
secureupdate.dwp.gov.uk
stat-xplore.dwp.gov.uk
secureonline.dwp.gov.uk
secureonline.dwp.gov.uk
dev.uc.confirm-your-identity.dwp.gov.uk
communicationcentre.dwp.gov.uk
get-state-pension.service.gov.uk
supportforcysp.dwp.gov.uk
jira.dwp.gov.uk
prap-staging.dwp.gov.uk
733-amr-exchange-gateway.feat.exchange.dwp.gov.uk
api.1129-amr.feat.exchange.dwp.gov.uk
secure.dwp.gov.uk
careers.dwp.gov.uk
dev.prap.dwp.gov.uk
secureies.dwp.gov.uk
www.dwpe-services.direct.gov.uk
sts-tell-us-someone-died.dwp.gov.uk
communicationcentre.dwp.gov.uk
getinvolved.dwp.gov.uk
tell-us-someone-died.dwp.gov.uk
jobcentre.dwp.gov.uk
getinvolved.dwp.gov.uk
497-mr-keycloak.feat.exchange.dwp.gov.uk
729-amr.feat.exchange.dwp.gov.uk
sts.dwp.gov.uk
*.digital.uc.dwp.gov.uk
jobs.dwp.gov.uk
securetest.tes.dwp.gov.uk
churchill-beta.dwp.gov.uk
*.architecture.dwp.gov.uk
paradoxrdpqa.dwp.gov.uk
mat-hol.feat.exchange.dwp.gov.uk
findajob.dwp.gov.uk
secureonline.dwp.gov.uk
get-state-pension.service.gov.uk
idp-tell-us-someone-died.dwp.gov.uk
secure.dwp.gov.uk
*.staging-green.smi-wa-digital.uk
getinvolved.dwp.gov.uk
*.atw.health.dwp.gov.uk
487-merge-request-local.feat.exchange.dwp.gov.uk
secureonline.dwp.gov.uk
burbank-client.ppb.dwp.gov.uk
findajob.dwp.gov.uk
authorisedofficers.dwp.gov.uk
getinvolved.dwp.gov.uk
295-mr-curity.feat.exchange.dwp.gov.uk
laa-check.ppb.dwp.gov.uk
*.health.dwp.gov.uk
prap.dwp.gov.uk
check-ns-esa-special-payment.dwp.gov.uk
seepotential.dwp.gov.uk
493-mr-curity.feat.exchange.dwp.gov.uk
secure.dwp.gov.uk
getinvolved.dwp.gov.uk
proveyoucanapply-uc.dwp.gov.uk
admin.eas.dwp.gov.uk
atos-cms2012-sdx.dwp.gov.uk
sts.dwp.gov.uk
495-mr-curity.feat.exchange.dwp.gov.uk
crowdclone.dwp.gov.uk
735-bmr.feat.exchange.dwp.gov.uk
pensioncreditcalculator.dwp.gov.uk
apply-for-pension-credit.dwp.gov.uk
ds1500.drs.auth.dwp.gov.uk
www.dwp.gov.uk
293-mr-keycloak.feat.exchange.dwp.gov.uk
support.findajob.dwp.gov.uk
141-mr-redis.feat.exchange.dwp.gov.uk
stat-xplore.dwp.gov.uk
admin-tell-us-once.dwp.gov.uk
events.dwp.gov.uk
api.pre.dataworks.dwp.gov.uk
authenticate-application.dwp.gov.uk
communicationcentre.dwp.gov.uk
www.referral-and-payments-service.dwp.gov.uk
221-evergreening-local.feat.exchange.dwp.gov.uk
securetest.tes.dwp.gov.uk
sip.dwp.gsi.gov.uk
www2.dwp.gov.uk
api.qa.dataworks.dwp.gov.uk
jamf.engineering.digital.dwp.gov.uk
paradoxrdp.dwp.gov.uk
491-merge-request-local.feat.exchange.dwp.gov.uk
webcs.dwp.gov.uk
authborg-staging.dwp.gov.uk
apply-for-pension-credit.dwp.gov.uk
726-amr.feat.exchange.dwp.gov.uk
api.733-amr.feat.exchange.dwp.gov.uk
authorisedofficers.dwp.gov.uk
secureonline.dwp.gov.uk
support.findajobstage.dwp.gov.uk
api.int.dataworks.dwp.gov.uk

Certificate

The complete raw certificate details for laa-check.ppb.dwp.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 93873699076265622141777658573024035797914568825
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 09:45:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-22 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'The Department for Work and Pensions'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LAA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'laa-check.ppb.dwp.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787901823609371270497171326607227884340633522077007643342367202620529452209462013449461880601994651225414059751886521074079439317461420849050982071164201382856691749634426634898756411274676136062280677795944892736205355966073270202620227644696708186834914807163666312031928329955696145889567323061318448409318253367664609984582632809229425145463859464970956188001136397089940985289112989063416946822079117490285268591690762212041996355980680861465482662146234172704813623860134082014756310006455914522142400900495513933431395532004790842053861213597058301707601230800335741994131969525527847020934216389373306117758426760299013013878174962371274190383210800203559495010327926932474212824437828392663562919740236175375996710682232351731708784994912545174463008636138494707224331753237887868385327250537523091953889653721192301674956972405529994238712230314540317901266450990470929036845474142998801237874280212838278207391078073261986383308737620989336453881960447627169518554996358682599806222534263321261214686129954484492844134210218261566945283074728505808668680947128093578217961181269845055561043239789398369350360229238386251822750631199645006233461487253649251542684819371873492159498602374008208988714509981986276428702478717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laa-check.ppb.dwp.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b232544d75e878f7d7f6dc54733d6419c85c8d38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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