OV SSL/TLS Certificate for www.whitbread.co.uk Issued to Whitbread PLC

Certificate is witin its validity period

Issued by DigiCert Inc (GeoTrust TLS RSA CA G1)

About the www.whitbread.co.uk OV SSL/TLS Certificate

This certificate with serial number 0b:50:09:ed:9f:11:4f:19:9e:2e:1e:f8:ca:64:35:2d for www.whitbread.co.uk was issued on by DigiCert Inc.

With 8 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for www.whitbread.co.uk provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert Inc

Organization: DigiCert Inc
Organizational unit: www.digicert.com
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 0b:50:09:ed:9f:11:4f:19:9e:2e:1e:f8:ca:64:35:2d
Serial Number (int): 15037093070306851397952287493337658669
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: 87:16:27:d5:f2:a1:d6:91:9a:ea:77:7f:e0:83:df:e9:ab:cb:4f:86
Authority Key Identifier: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (SHA-1): 24:86:5a:ce:7e:b4:3a:f1:99:3e:b7:b7:84:4f:99:83:f8:71:8e:7d
Fingerprint (SHA-256): 11:3e:fb:5d:45:eb:c5:15:56:6b:f7:66:88:a3:e0:4f:a3:5c:47:fa:c3:35:73:51:66:85:16:f9:d0:56:3d:27

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation Information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate www.whitbread.co.uk
8
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.whitbread.co.uk

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

www.whitbread.co.uk
api.whitbread.co.uk
cdn.whitbread.co.uk
mobilereporting.whitbread.co.uk
whitbread.co.uk
whitbread.com
www.whitbread.com
www.whitbreadcareers.com

X.509 Certificate

The complete raw X.509 certificate details for www.whitbread.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnTBHIQ6zpEc9fQMtWRV
mLKOjhBtisRWtbRmelRP1FkD7ynjPwQ0Bf6/uP359KktlJRgNZ+wgv2YoZnESjmO
yXNUEoEwDhnSn3cXBdqTLTv/pZyLRZ8MHODbICXHHc7rM8jAdHSGoYTqRZFI7+SZ
dkWKwDzGFkbg7SSgvd+6ETNsQg98L1qdiiVkkZ2mc/6Yq2XEaQlAWcXMCwiQiDBg
6kYZfCaPxTz6s7e3+16s3u4X+IGz4i+Uqw98JBMcRS+SqIuqFoybtcz9V9A5dbtG
OeXtA38AFLyHf6RwdO8unWAbwoe05vLHgSOyjeAuufDlA4Pexx9T5YNPWW3jG1p4
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15037093070306851397952287493337658669
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-06-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dunstable'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Whitbread PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.whitbread.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22527991995493343545250426283477127037763469158334400761639513961768024023212436548876053802887992174544422387779812245597335523396107522356317811930035219942866084374872610882302648083713030359170052855145497464528535117183027509615913664987415602986065471833429576842946924698995207984594394261896520464417988996259767468487548512882564511830340356813390052220988303446075640367827524907231932957358035200064563570918579665373792494432125637226520563259503556588440686229275546303370312282997870324735275994349230762766728309201650601468960675850159161104933148522388781615115300108629707745911778606910625864644749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							871627d5f2a1d6919aea777fe083dfe9abcb4f86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (176 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitbread.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.whitbread.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.whitbread.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilereporting.whitbread.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitbread.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitbread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitbread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitbreadcareers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680076000e5794bcf3aea93e331b2c9907b3f790df9bc23d713225dd21a925ac61c54e21000001976a65ae940000040300473045022100ecdfdaa4417da32c7c50a9d030002b758aac40098975a1fd55f93a5876665f5b02200f192f08ef7a634f1c450d81d3fd051ce3a2ec4568eb118d901f36a48b4c63170076006411c46ca412eca7891ca2022e00bcab4f2807d41e3527abeafed503c97dcdf0000001976a65aed40000040300473045022100b22feab3785585171bbdf3240304503e568825aaf1f8509c44b3eaffbed444f602201422c2245c5c27acbed68b0e3c156f8c84c3a36477911edcbcebc19f6d2a27a7007600499c9b69de1d7cecfc36decd8764a6b85baf0a878019d15552fbe9eb29ddf8c3000001976a65aee8000004030047304502205878c9ca0b4dc9a2a16d89c1ede51b23c36da659f4cf2dd2e76e6583510afa42022100ef864a6e73507134dd2e945e1b70dabef7fe6f6b4e2df7d79b71f71bae02df8c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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