*.shepherdsfriendly.co.uk

- The Shepherds Friendly Society Ltd -

Issued by DigiCert Secure Server CA

About this certificate

This digital certificate with serial number 01:d6:6f:e7:6c:4a:a6:d8:db:6b:4f:c1:06:75:32:8e was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Shepherds Friendly Society Ltd

Organization: The Shepherds Friendly Society Ltd
State / Province: Cheshire
Locality: Cheadle
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:d6:6f:e7:6c:4a:a6:d8:db:6b:4f:c1:06:75:32:8e
Serial Number (int): 2442649206197544600388820399121838734
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: e2:bb:82:12:e9:bb:e7:fd:89:bd:7b:d6:c4:32:f8:79:00:5d:45:1e
AuthorityKeyId: 90:71:db:37:eb:73:c8:ef:dc:d5:1e:12:b6:34:ba:2b:5a:a0:a6:92

Fingerprint (sha1): 37:79:9c:0f:7e:fd:cf:22:de:15:e2:b0:2f:c7:6b:33:00:fb:92:26
Fingerprint (sha256): 1d:61:02:46:46:3f:c7:40:41:45:25:b1:59:05:74:e5:87:60:a2:c2:93:43:27:5b:ee:df:1e:12:39:e4:eb:17

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-g7.crl

Check the revocation status for certificate *.shepherdsfriendly.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.shepherdsfriendly.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.shepherdsfriendly.co.uk
shepherdsfriendly.co.uk

Other certificates including the domain name shepherdsfriendly.co.uk

(limited to 100 certificates)
ssl389932.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389931.cloudflaressl.com
ssl389930.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
shepherdsfriendly.co.uk
sni111518.cloudflaressl.com
ssl389932.cloudflaressl.com
ssl389932.cloudflaressl.com
*.shepherdsfriendly.co.uk
ssl389931.cloudflaressl.com
ssl389930.cloudflaressl.com
www.shepherdsfriendly.co.uk
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
www.shepherdsfriendly.co.uk
sni111518.cloudflaressl.com
*.shepherdsfriendly.co.uk
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
*.shepherdsfriendly.co.uk
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
*.shepherdsfriendly.co.uk
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
*.shepherdsfriendly.co.uk
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389930.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389930.cloudflaressl.com
ssl389932.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389932.cloudflaressl.com
sni.cloudflaressl.com
ssl389930.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
*.shepherdsfriendly.co.uk
sni111518.cloudflaressl.com
ssl389932.cloudflaressl.com
ssl389931.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389930.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389932.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389931.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389931.cloudflaressl.com
ssl389930.cloudflaressl.com
sni111518.cloudflaressl.com
shepherdsfriendly.co.uk
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389931.cloudflaressl.com
ssl389930.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389932.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
www.shepherdsfriendly.co.uk
ssl389932.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389930.cloudflaressl.com
*.shepherdsfriendly.co.uk
ssl389932.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389930.cloudflaressl.com
ssl389931.cloudflaressl.com
ssl389931.cloudflaressl.com
*.shepherdsfriendly.co.uk
ssl389932.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389932.cloudflaressl.com
ssl389931.cloudflaressl.com
ssl389932.cloudflaressl.com
sni.cloudflaressl.com
ssl389931.cloudflaressl.com
ssl389930.cloudflaressl.com
ssl389932.cloudflaressl.com

Certificate

The complete raw certificate details for *.shepherdsfriendly.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq0HMUSxA/eglfmFFRlB
WSRB+CcAqbE88D5yOiuTNXlhYNSeZsUuyK4r1RLtE0UceR4Q6MdXgewdYEvomp5y
j6jZA1v3qlwtMyGnBuex+KVYQ2R/0fR8voJBW8rVTjh61ZgZKXoPRc4osv5V+WUP
LPGZ3DMkw92zEyvJcpJqiZSmdomw7TieafLBO0msktH3pXEI9PzWD3/Nco0MzJSE
MpsTGJB/8muZB2fWeneCkFZ+qrmdRMhm54cWAuIY6/saQlkzK3OCfW+yyXP2dPtT
Gg7/syBbUpr+FBOBBUulH8QWbqNNzsb3Ja/NaXbaMDlxeLFunMELGhal5+hrwDDh
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2442649206197544600388820399121838734
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cheshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cheadle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Shepherds Friendly Society Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.shepherdsfriendly.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24575554497362953125690128108674989260407099527284233783714319811085442449001047699821346965288579420376154679347039038592053022636682132408940904974005282439889914144660044720645447286478722006740076326807374930507112227375428919848898065092152889971659637524291162095680678706630508117545557595480229331413590508107026168557580200515689409299668764401098316808521222031959912306869513769815701523196698451263249970194516963463190050541541665872176449470834121957030827311932802605004050254227056814117714188417302784060431394079853705552808128608439773857687662523970461513632528829527663652783500197402771106881957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9071db37eb73c8efdcd51e12b634ba2b5aa0a692
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2bb8212e9bbe7fd89bd7bd6c432f879005d451e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shepherdsfriendly.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shepherdsfriendly.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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