*.bps.org.uk

- The British Psychological Society -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 08:1e:f0:2a:92:ea:39:51:56:52:33:a8:89:cb:3f:a3 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The British Psychological Society

Organization: The British Psychological Society
State / Province: Leicestershire
Locality: Leicester
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:1e:f0:2a:92:ea:39:51:56:52:33:a8:89:cb:3f:a3
Serial Number (int): 10794464023391044563092385276535455651
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 46:e4:d4:b0:88:19:46:48:5f:58:1b:59:e2:f4:3e:ca:13:ea:d5:ac
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 39:72:28:62:78:7e:00:f6:bc:05:38:14:30:2c:35:e6:e4:2a:08:1b
Fingerprint (sha256): 18:59:54:9d:21:5e:97:c2:e5:11:16:6d:97:36:85:8f:6e:3b:e0:9d:a4:df:83:d5:e3:6f:d9:0e:b0:97:1e:b7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g4.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g4.crl

Check the revocation status for certificate *.bps.org.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.bps.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bps.org.uk
bps.org.uk

Other certificates including the domain name bps.org.uk

(limited to 100 certificates)
www.pugpig.com
support.bps.org.uk
dns-vetting1j.map.fastly.net
support.bps.org.uk
tls.automattic.com
*.bps.org.uk
ssl376462.cloudflaressl.com
www.pugpig.com
www.pugpig.com
ssl376460.cloudflaressl.com
vpn.bps.org.uk
dns-vetting1j.map.fastly.net
support.bps.org.uk
dns-vetting1j.map.fastly.net
tls.automattic.com
ssl376461.cloudflaressl.com
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
www.pugpig.com
support.bps.org.uk
appsrequest.nanometrics.com
tls.automattic.com
ssl376461.cloudflaressl.com
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
www.pugpig.com
www.pugpig.com
dns-vetting1j.map.fastly.net
ssl376462.cloudflaressl.com
support.bps.org.uk
*.content.pugpig-dev.com
support.bps.org.uk
support.bps.org.uk
vpn.bps.org.uk
support.bps.org.uk
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
support.bps.org.uk
support.bps.org.uk
ssl338979.cloudflaressl.com
www.pugpig.com
dns-vetting1j.map.fastly.net
connect.bps.org.uk
springboard.wiley.com
www.pugpig.com
support.bps.org.uk
tls.automattic.com
dns-vetting1j.map.fastly.net
*.content.pugpig-dev.com
ssl338979.cloudflaressl.com
dns-vetting1j.map.fastly.net
learn.bps.org.uk
*.bps.org.uk
dns-vetting1.map.fastly.net
support.bps.org.uk
www.pugpig.com
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
ssl376462.cloudflaressl.com
*.bps.org.uk
springboard.wiley.com
support.bps.org.uk
ssl376461.cloudflaressl.com
www.pugpig.com
support.bps.org.uk
www.pugpig.com
connect.bps.org.uk
support.bps.org.uk
appsrequest.nanometrics.com
www.pugpig.com
www.pugpig.com
support.bps.org.uk
www.pugpig.com
*.content.pugpig-dev.com
support.bps.org.uk
support.bps.org.uk
ssl376462.cloudflaressl.com
dns-vetting1j.map.fastly.net
ssl338979.cloudflaressl.com
www.pugpig.com
support.bps.org.uk
support.bps.org.uk
support.bps.org.uk
itsr.etax.com.au
support.bps.org.uk
vpn.bps.org.uk
ssl376460.cloudflaressl.com
support.bps.org.uk
www.pugpig.com
www.pugpig.com
support.bps.org.uk
appsrequest.nanometrics.com
iservices.zamzamgrand.com
*.bps-uat2.bps.org.uk
support.bps.org.uk
appsrequest.nanometrics.com
support.bps.org.uk
dns-vetting1j.map.fastly.net
ssl376460.cloudflaressl.com

Certificate

The complete raw certificate details for *.bps.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEs8loXmjlazvL0SYQkK
bvQbxDomKLaeM1BM4esyM/fPKq0mjqam/Ub+ae4gDwsoDalXdPG8yhRUB9F4SJuG
mvju3MShH4d1jwm2Hgl9INo9jFoLa/1k+nvfBGvP+HQ5S+NHvRWTyBrdUQ06bVSi
kHcrSNUxO29nqQOvp6hD6tp+I6P9SGAP71Axn+QnXQTvZAA01sUkqQX0nt2B2uSH
29M69TxAkCq5uT3Uj+Byb931b19s1bEkH91az+W6TL4RJdfG3w/9mkg61dEDMsSg
1Gab0YX02fsdH2Izp1hsZ99SX/KoWZW+5KSFV77VungOtJ9c85YB1IlWEN5+j7yL
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10794464023391044563092385276535455651
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leicestershire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leicester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The British Psychological Society'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bps.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20235229380191454544956746996580279296958228925121152052590157799257820464525419070457091937517238157036172019083914808423738843678496050418698561591900724877824272241489639122732943969857333643017916641673647783924439154161430035469651087836890874918272748322490566660639627462553930277049045025277772472009818147197147181833453016268648232554861707360141870788381100102541254857293312843086050342154486059108088245490508349161167895264244794834626780773532184264231601269361105204303971609431330633169511989332791351858996448573217751422113384783668817449017128223099250274126740920873865960262985193688670198860737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46e4d4b0881946485f581b59e2f43eca13ead5ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bps.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bps.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004da876f3135878c19a1e36ba93286ea8c81f84ff4be4533532181144e4a20e06ecc55642ef93ba57b5193bce8f1ab2b7471b8e88f2c46b4d5619d5a94a30d1aa54b339617a4e7d8f4f0c3db705f7812a461a7a3f82e9f9129ac76500c1ceb99e3d74fd76c656fe48f9b2ff642ef5c87fca765c0acfdb37bef4cb0499b82ffc9f83bcab72e676fcc250f90ec3ea10c72d9b1f060a9e69d56ba0425fdbe65f7f3ab4ef463f285e2b83d98d2fc3bd9d0bda1069524e402cc75879da77e04fd60a296cb803181ee5e7c0a11ee095352bb3aca724c5ead72d6df368345ca4a42abeec6f1171e3e90d4d4617fe24c79e516993dd04bc521f24f1f4ef356e32323d8f12