www.cambridgeshireinsight.org.uk

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 61:0a:02:24:8c:5e:fc:39:fb:45:ff:bc was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cambridgeshireinsight.org.uk

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 61:0a:02:24:8c:5e:fc:39:fb:45:ff:bc
Serial Number (int): 30032145329797169489964826556
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 9b:c5:ef:1c:60:56:af:17:b7:79:05:15:d4:6f:01:25:7f:47:43:1e
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 57:f9:ea:82:aa:5a:d9:bd:71:63:04:f1:71:fa:3f:f1:c4:0b:c7:41
Fingerprint (sha256): 1c:8f:71:8b:28:25:20:a4:a0:22:94:a0:c1:a6:dc:3c:bd:72:67:90:ec:63:cb:e7:02:86:80:55:85:41:33:26

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate www.cambridgeshireinsight.org.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cambridgeshireinsight.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cambridgeshireinsight.org.uk
cambridgeshireinsight.org.uk

Other certificates including the domain name cambridgeshireinsight.org.uk

(limited to 100 certificates)
cambridgeshireinsight.org.uk
www.cambridgeshireinsight.org.uk
www.cambridgeshireinsight.org.uk
www.cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
www.cambridgeshireinsight.org.uk
opendata.cambridgeshireinsight.org.uk
cambridgeshireinsight.org.uk
opendata.cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
www.cambridgeshireinsight.org.uk
cambridgeshireinsight.org.uk
cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
www.cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
www.cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
www.cambridgeshireinsight.org.uk
www.cambridgeshireinsight.org.uk

Certificate

The complete raw certificate details for www.cambridgeshireinsight.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gjGiRllEyCMQrI0jtVL
M0MbXE79bXlBWkhGGe/vyTKRkBYMXlny3w8tQuv5sf9x4u08F4xbPuDtwaNeuYVn
nhnn0L+5GESO1otQ3ZFqpUvbzgqhG+sNTWU59u7S7TolXEdCsc8aEcayURP0FydP
qo0PUjHv8uj74PTYMc9p9aUoIkh9q65XgI+PF0EDhPID4VmHZZY3xaJ+3HXKVfId
bINFtT2sReuetix8hzDvkEx/d1OVAv/39LyeqZ9zkt04U0qGv7GxI2S9FBAFXpQi
JkSxQTYOsMrYjbefL23pzDY+iAErFKGtv0O0jjHZH+zfFDzwUOeYef08TspcLPuM
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30032145329797169489964826556
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-12 12:22:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 08:36:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cambridgeshireinsight.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30553997176650204485144065583212358598226089678160180300859164883655876475763659936467816453562756914670710181750926456756534866534760011228374351478428623649328251124805758288058405184512154708660855108162316852699290377865907640012719678031296141268606181320720996195875037728883342349242617583764036507176245839965690911357518208112997663024583563204115744866990175617886615449725476162830711296844035113903237919043021779912474858586878934696953241179734256326946765743651659522156377120139037657639031492607823932709686093664676439478684610203396374941641406410728323076022391471574063258814363595096276491537577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambridgeshireinsight.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgeshireinsight.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9bc5ef1c6056af17b7790515d46f01257f47431e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							01660075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001850648f7f0000004030046304402203f3326acb3adf73d6bb68d6eef229cff0db398559bb3647f46b9c35f02a1201a022005c18044917da12658c2c0141f15c86d0af9a53c24e0cffddeab3578c6e9596a00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001850648f8110000040300463044022014e6df889b693088f2a5c1307bd7f47adf95e41e2129226e0594e6945c8617010220516551f24ae5c53a52ba07ab8bddbf8981d284c7225b6a5e6b26e9865fbe6d30007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001850648f83a00000403004730450220524d90a34630ebfbc6e43d9d2b3c365dc3408bcd772575adf252c5928e646157022100fbc824dce94ee74f1b2b99586e0ab493371c63e2799c0e1525fcb0b5b484c60d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004e76a32b9aafb00e3a80fc5fbc043041e6c66a3002d5c9255aecbf08c83d3ceaf34942147783c85cf99562b450e0f55f1962d0d6f5d7118e5c5f141b16b85833bcab05dd221f2250c0fdd2e0daf1af00374a073ec6e200823a383dcd3c235a2dbfb22b7e7b6c07e75173ccb7a6b7799e7cb8db6350e64d024aab873e36add93dc493091549b5ca953374eeef343e0d2393c80b919a6d25fe2294fd1ed2dbf8ae5f0a0742affd5bcb12298fa2f746e6ef6961e273b7cb8b55657b6343db3427536699f3a16183d1159ebfdf478a3318fcadcc849a44f9526ae1c5e4dd31c11dfea517501740549e7e57cb84406eff0036c379345ca2c92f2eed4edf09c3540bdd