oidadmprd.co.ad.specsavers.com

- Specsavers Optical Group Limited -

Issued by Symantec Class 3 Secure Server SHA256 SSL CA

About this certificate

This digital certificate with serial number 33:e4:f6:6e:6d:2e:4c:ee:83:61:c9:0b:6f:46:94:a0 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Specsavers Optical Group Limited

Organization: Specsavers Optical Group Limited
Organization unit: SOG IT
State / Province: CHANNEL ISLANDS
Locality: St Andrews
Country: GG

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:e4:f6:6e:6d:2e:4c:ee:83:61:c9:0b:6f:46:94:a0
Serial Number (int): 68979469690426865055274281562616009888
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: db:62:20:fb:7d:02:89:7c:d2:3b:6f:c7:e4:32:6c:05:52:1d:ad:b1

Fingerprint (sha1): 02:23:e1:28:ca:9c:e9:76:c2:32:7e:00:34:16:6c:69:ae:51:8a:1e
Fingerprint (sha256): 14:99:b2:b5:87:df:3d:1c:69:df:b0:2c:eb:99:2c:1d:8a:af:a0:31:0d:78:66:d1:dc:44:44:4b:f3:bb:9c:2a

Issuing Certificate URL: http://sg.symcb.com/sg.crt

Revocation information

OCSP Server: http://sg.symcd.com
CRL Distribution Point: http://sg.symcb.com/sg.crl

Check the revocation status for certificate oidadmprd.co.ad.specsavers.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oidadmprd.co.ad.specsavers.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oidadmprd.co.ad.specsavers.com

Other certificates including the domain name specsavers.com

(limited to 100 certificates)
ebssitx.az.specsavers.com
hyptst.az.specsavers.com
apipot-management.az.specsavers.com
oemnpbi.az.specsavers.com
*.bookings.specsavers.com
ssl503523.cloudflaressl.com
ukhs-slvapp47.uk.specsavers.com
sonarqube-dev.apps.specsavers.com
openaccounts-uat.gg.specsavers.com
ssl503525.cloudflaressl.com
gglv-smacfile02.gg.specsavers.com
openaccounts-smt.gg.specsavers.com
sodprf.az.specsavers.com
spark-emea.ad.specsavers.com
oidadmprf.az.specsavers.com
esmt.apps.specsavers.com
osb.co.ad.specsavers.com
adfuat.az.specsavers.com
ebssitx.az.specsavers.com
adbuilder.specsavers.com
jhsams.co.ad.specsavers.com
bb-emea.internal.specsavers.com
airwatchds.specsavers.com
oiddsmpre.co.ad.specsavers.com
omsprf.az.specsavers.com
osb.co.ad.specsavers.com
apiportal.ad.specsavers.com
edqpre3.ad.specsavers.com
retailcomms.ec.specsavers.com
vc.specsavers.com
gglv-smacswupd.gg.specsavers.com
odiprd.co.ad.specsavers.com
soaprf.az.specsavers.com
vcpprd.co.ad.specsavers.com
sclub.specsavers.com
osbsit.az.specsavers.com
specslink-no.specsavers.com
adfs.specsavers.com
voemaprd2.co.ad.specsavers.com
hubbletest.az.specsavers.com
adfpre.co.ad.specsavers.com
EDQOCHSIT.co.ad.specsavers.com
airwatchcn.specsavers.com
ap-sodtat.az.specsavers.com
terpander.gg.specsavers.com
mftdsit.az.specsavers.com
join.specsavers.com
dem.co.ad.specsavers.com
ap-sodtat.az.specsavers.com
edqsit.ad.specsavers.com
asaudiopaddr.apps.specsavers.com
stibo.apps.specsavers.com
ebsuat.az.specsavers.com
orchestrator-emea.apps.specsavers.com
specsavers.com
fridm-dev.ad.specsavers.com
vcpuat.az.specsavers.com
rundeck.gg.specsavers.com
mftdsit.az.specsavers.com
oidadmprd.co.ad.specsavers.com
content.specsavers.com
oemnp.az.specsavers.com
demuat.az.specsavers.com
sas.1195.manchesterfort.specsavers.com
vcpsit.az.specsavers.com
*.bookings.specsavers.com
iron.specsavers.com
ssl332136.cloudflaressl.com
sod.co.ad.specsavers.com
apipot.az.specsavers.com
odisit.az.specsavers.com
adfs.specsavers.com
shsdub.co.ad.specsavers.com
dhue-emea.ad.specsavers.com
oraclesob.gg.specsavers.com
odisit.az.specsavers.com
sni.cloudflaressl.com
audiopadpre02.apps.specsavers.com
iron2.specsavers.com
airwatchcnintuat.specsavers.com
dresourcemgr-emea.ad.specsavers.com
audiopadpre01.apps.specsavers.com
odiqa.co.ad.specsavers.com
notification.specsavers.com
ukao-slvapp47.uk.specsavers.com
gitscm.uk.specsavers.com
rtnsvcdev.ad.specsavers.com
grafanadr-emea.ad.specsavers.com
vendorportal.specsavers.com
gglv-smdc01.gg.specsavers.com
nevtest_sha1.specsavers.com
stibo-qa.specsavers.com
sso.co.ad.specsavers.com
ap-osbtst.az.specsavers.com
booking.specsavers.com
ochdevmig.ad.specsavers.com
app-genesysescrow.specsavers.com
spvwa.ad.specsavers.com
soduat.az.specsavers.com
soapre.co.ad.specsavers.com

Certificate

The complete raw certificate details for oidadmprd.co.ad.specsavers.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxCHkgH+1c30hSbtkME/
7lnZdnDtpGXm8sTXX1mxnLEm7cX+ArXpflNVb6YYsMRP6/zma6UEJ8rzbEUKTtK7
ySboE25/2rIqyYiNruyS7h+YnMcx1etdyJIC6iEvlprxYQQ8MO5clP8JKQjMgZXj
p2xa3bvY7ysP0A0wuwEkEX+s7j05cQfiwz4wzC3tnewYvG+Su34DA4YYQ7Mq26kc
RL3Hl6/7kUSoekAOm0oTlIGf98Vc48lamkchQgol97lnIXFHjjSC7GxRRffA4Dw0
LDYrFwvZreZjbgD8sZWLC4T1TGInjx2yBuJoiTYVLcAPWAztedaqpAnWgU+HDLV/
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 68979469690426865055274281562616009888
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CHANNEL ISLANDS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'St Andrews'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Specsavers Optical Group Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SOG IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'oidadmprd.co.ad.specsavers.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24624620503956358370464041497819801426918967987024934448853855558680296661052441008466842139411878519558587881036781005439526575350863230732553845942703210642961993055165428739168971468425297649557044682339729314013846600694287451531113257576005564206094661290406600628348602241917761422965376191378170154171175452581618274740426704596298188001885359464214312173181294569322467837918672707654277449135653411925988561626761640719646499346623399907290781242298017251611896321514164743315410332075628012989463391881202032294326216540931672890033157502313435457290362176909555245664145391144744740699964125080151611768777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oidadmprd.co.ad.specsavers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName db6220fb7d02897cd23b6fc7e4326c05521dadb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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