tls-mail.brake.co.uk

- Brake Bros Limited -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 01:a0:0e:15:ab:3b:aa:61:93:80:11:b8:49:aa:b3:64 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Brake Bros Limited

Organization: Brake Bros Limited
Organization unit: IS
State / Province: Kent
Locality: Ashford
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:a0:0e:15:ab:3b:aa:61:93:80:11:b8:49:aa:b3:64
Serial Number (int): 2160281163670420121477758665456530276
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 73:39:b9:ca:84:25:d4:fa:35:3b:61:47:3a:7a:63:dc:14:43:28:9b
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): d2:84:ab:a5:95:8c:08:62:66:8a:67:84:cb:79:31:6a:9f:09:24:91
Fingerprint (sha256): 16:41:3e:aa:ae:9b:a3:80:52:b0:8a:3b:5b:50:de:89:fc:df:c2:14:99:e4:bd:77:f3:7f:78:34:ca:bd:c3:a2

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate tls-mail.brake.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls-mail.brake.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tls-mail.brake.co.uk

Other certificates including the domain name brake.co.uk

(limited to 100 certificates)
elearning.brake.co.uk
academy.brake.co.uk
academy.brake.co.uk
academy.brake.co.uk
academy.brake.co.uk
academy.brake.co.uk
academy.brake.co.uk
image.care-chemicals.basf.com
tls-mail.brake.co.uk
image.care-chemicals.basf.com
academy.brake.co.uk
elearning.brake.co.uk
netmail.brake.co.uk
elearning.brake.co.uk
academy.brake.co.uk
*.brake.co.uk
san-5-s50.tlsprovisioning.exacttarget.com
elearning.brake.co.uk
academy.brake.co.uk
elearning.brake.co.uk
elearning.brake.co.uk
tls-mail.brake.co.uk
academy.brake.co.uk
academy.brake.co.uk
academy.brake.co.uk
academy.brake.co.uk
elearning.brake.co.uk
academy.brake.co.uk
image.care-chemicals.basf.com
academy.brake.co.uk
elearning.brake.co.uk
elearning.brake.co.uk
salesportal.brake.co.uk
academy.brake.co.uk
academy.brake.co.uk
tls-mail.brake.co.uk
elearning.brake.co.uk
elearning.brake.co.uk
elearning.brake.co.uk
elearning.brake.co.uk
elearning.brake.co.uk
*.brake.co.uk
elearning.brake.co.uk
academy.brake.co.uk
academy.brake.co.uk
elearning.brake.co.uk
netmail.brake.co.uk
elearning.brake.co.uk
staging.brake.co.uk
elearning.brake.co.uk
academy.brake.co.uk
academy.brake.co.uk
elearning.brake.co.uk
elearning.brake.co.uk
academy.brake.co.uk
academy.brake.co.uk
clicks2.brake.co.uk
elearning.brake.co.uk
elearning.brake.co.uk
academy.brake.co.uk
sales.brake.co.uk
academy.brake.co.uk
academy.brake.co.uk
academy.brake.co.uk
san-5-s50.tlsprovisioning.exacttarget.com
elearning.brake.co.uk
elearning.brake.co.uk
academy.brake.co.uk
elearning.brake.co.uk
elearning.brake.co.uk
elearning.brake.co.uk
elearning.brake.co.uk
growandgain.brake.co.uk
www.brake.co.uk
academy.brake.co.uk
b12.brake.co.uk
clicks2.brake.co.uk
growandgain.brake.co.uk
academy.brake.co.uk
image.care-chemicals.basf.com
academy.brake.co.uk
news.brake.co.uk
academy.brake.co.uk
academy.brake.co.uk
academy.brake.co.uk
image.care-chemicals.basf.com
elearning.brake.co.uk
elearning.brake.co.uk
elearning.brake.co.uk
academy.brake.co.uk
academy.brake.co.uk
elearning.brake.co.uk
salesportal.brake.co.uk
academy.brake.co.uk
click.marketing.brake.co.uk
academy.brake.co.uk
elearning.brake.co.uk
academy.brake.co.uk
elearning.brake.co.uk
san-5-s50.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for tls-mail.brake.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+qLnomCxdEwQ2tvrBvv
7erQr7Sp8pKIK9nTdJGRu2c9DVh0fANTefbNTFdkq+JeLaGuWgxl9TlyOH6qSC0Z
LCAOSN77qSp9TQ+T0fJlF6UUekwwEz7jDkRpAr2dedHz9ZEsUv1Svke+TuEfy0pq
EuHoVv7iC6f7FvqEmg820+/cruoqvxCgR8PZMC4BZ5Uj5YYmdmIi7TO0NQDWwuag
FZIJ3YSoE81YGOchGwR0FNVZ2L8OZQB/5qhjonq+wAM600cNa+gRHjqnS7uhl+3G
Y1tGYI4g63+/6C6zPhD3YWGvnhujEuRn/Xa73WwWIS0zR6diQ8szlyml7SM3+mBQ
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2160281163670420121477758665456530276
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kent'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ashford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brake Bros Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls-mail.brake.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24227174889915211247940200963801070458897335718158241226945669310065864448456572013374466302029960103576419250585378875209156189855850265244259072806572317396100959515186459800473985652103330077735866758149529443808893383545270054759670775932122459687777018523901459988645427975718037104115441582468309487467516389031060875745275196134467289937234273775927728466432047762106535984425041918033897032920403538129064208733407772754741483226592960521390668109849219521119985195884439578049471742393765088814456413844079706065959691846871859615734467093061250115433906878193565570460463597689008513920397540748297683095603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7339b9ca8425d4fa353b61473a7a63dc1443289b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls-mail.brake.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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