secure.tes.dwp.gov.uk

- DWP -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:1d:7b:95 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

DWP

Organization: DWP
State / Province: South Yorkshire
Locality: Sheffield
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:1d:7b:95
Serial Number (int): 1277000597
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 39:aa:83:d8:16:4c:1e:24:3d:3e:4d:07:19:32:1b:59:99:44:3b:02
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 9e:5f:3a:6f:24:11:d8:86:ba:ee:2d:dd:8f:d6:53:5c:16:93:69:7f
Fingerprint (sha256): 23:de:64:df:8b:2d:6e:8c:20:d1:1b:47:70:00:95:43:43:63:ec:a2:0b:b5:c9:66:b1:06:94:77:98:09:66:23

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate secure.tes.dwp.gov.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.tes.dwp.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.tes.dwp.gov.uk

Other certificates including the domain name dwp.gov.uk

(limited to 100 certificates)
sip.dwp.gsi.gov.uk
stat-xplore.dwp.gov.uk
getstatepension.dwp.gov.uk
*.atw.health.dwp.gov.uk
support.findajobstage.dwp.gov.uk
secureies.dwp.gov.uk
secureupdate.dwp.gov.uk
stat-xplore.dwp.gov.uk
secureonline.dwp.gov.uk
secureonline.dwp.gov.uk
dev.uc.confirm-your-identity.dwp.gov.uk
communicationcentre.dwp.gov.uk
get-state-pension.service.gov.uk
supportforcysp.dwp.gov.uk
jira.dwp.gov.uk
prap-staging.dwp.gov.uk
733-amr-exchange-gateway.feat.exchange.dwp.gov.uk
secure.dwp.gov.uk
careers.dwp.gov.uk
dev.prap.dwp.gov.uk
secureies.dwp.gov.uk
www.dwpe-services.direct.gov.uk
sts-tell-us-someone-died.dwp.gov.uk
communicationcentre.dwp.gov.uk
getinvolved.dwp.gov.uk
tell-us-someone-died.dwp.gov.uk
jobcentre.dwp.gov.uk
getinvolved.dwp.gov.uk
729-amr.feat.exchange.dwp.gov.uk
sts.dwp.gov.uk
*.digital.uc.dwp.gov.uk
jobs.dwp.gov.uk
securetest.tes.dwp.gov.uk
churchill-beta.dwp.gov.uk
*.architecture.dwp.gov.uk
paradoxrdpqa.dwp.gov.uk
mat-hol.feat.exchange.dwp.gov.uk
findajob.dwp.gov.uk
secureonline.dwp.gov.uk
get-state-pension.service.gov.uk
idp-tell-us-someone-died.dwp.gov.uk
secure.dwp.gov.uk
*.staging-green.smi-wa-digital.uk
getinvolved.dwp.gov.uk
*.atw.health.dwp.gov.uk
487-merge-request-local.feat.exchange.dwp.gov.uk
secureonline.dwp.gov.uk
burbank-client.ppb.dwp.gov.uk
findajob.dwp.gov.uk
authorisedofficers.dwp.gov.uk
getinvolved.dwp.gov.uk
295-mr-curity.feat.exchange.dwp.gov.uk
laa-check.ppb.dwp.gov.uk
*.health.dwp.gov.uk
prap.dwp.gov.uk
check-ns-esa-special-payment.dwp.gov.uk
seepotential.dwp.gov.uk
secure.dwp.gov.uk
getinvolved.dwp.gov.uk
proveyoucanapply-uc.dwp.gov.uk
admin.eas.dwp.gov.uk
atos-cms2012-sdx.dwp.gov.uk
sts.dwp.gov.uk
crowdclone.dwp.gov.uk
735-bmr.feat.exchange.dwp.gov.uk
pensioncreditcalculator.dwp.gov.uk
apply-for-pension-credit.dwp.gov.uk
ds1500.drs.auth.dwp.gov.uk
www.dwp.gov.uk
293-mr-keycloak.feat.exchange.dwp.gov.uk
support.findajob.dwp.gov.uk
141-mr-redis.feat.exchange.dwp.gov.uk
stat-xplore.dwp.gov.uk
admin-tell-us-once.dwp.gov.uk
events.dwp.gov.uk
api.pre.dataworks.dwp.gov.uk
authenticate-application.dwp.gov.uk
communicationcentre.dwp.gov.uk
www.referral-and-payments-service.dwp.gov.uk
221-evergreening-local.feat.exchange.dwp.gov.uk
securetest.tes.dwp.gov.uk
sip.dwp.gsi.gov.uk
www2.dwp.gov.uk
api.qa.dataworks.dwp.gov.uk
jamf.engineering.digital.dwp.gov.uk
paradoxrdp.dwp.gov.uk
491-merge-request-local.feat.exchange.dwp.gov.uk
webcs.dwp.gov.uk
authborg-staging.dwp.gov.uk
apply-for-pension-credit.dwp.gov.uk
726-amr.feat.exchange.dwp.gov.uk
api.733-amr.feat.exchange.dwp.gov.uk
authorisedofficers.dwp.gov.uk
secureonline.dwp.gov.uk
support.findajobstage.dwp.gov.uk
api.int.dataworks.dwp.gov.uk
findajob.dwp.gov.uk
idp-tell-us-someone-died.dwp.gov.uk
jobs.dwp.gov.uk
getinvolved.dwp.gov.uk

Certificate

The complete raw certificate details for secure.tes.dwp.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KI+FWMXVSwCYLaJozPT
PjmQjK3dntM3bFRCBoFdpKmyhuurSgpFuvG+C6krcxfwkWjqUmtCGwDd0TZp8Gjq
hacl3ekpUDIBwfs6gG2Fk3w0buVnvv7tEKk7Yzs4f6U9j0t8EV1nexgN7igftxEX
Lglzmc137igXN3omlg9ZURV+2GY/zlyU3l0PMJySIVl45fMxxFnL5PAoeWYPRx90
SnLX8sdVvskAJ1lxmBPsbMdJfdZi8Yy0v43YXz6D7N+BIDFOCEJdA4UZPpMj2WUZ
H/50YyxQ1Dfm6zcfdMU9yDpfQET8gVrxBf9t1jD0G0LA4u7sBkTzw8vS1vkaVAY6
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277000597
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-07-31 18:00:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-08-02 04:16:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South Yorkshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sheffield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DWP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.tes.dwp.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27347478638062032778102119309208896903524319369169255362678842311557280632988794625571075009880820280729553133333356880897576878194550569585809143553197032803631085116635449340988793218671524032967547018651002981375274065306810937971350788629500768158633082756067072000242025165059330211871657681004033849483943349762327657429182598854497028362955611449103262796032928199814380499075562716842258789561936723720180985732834983301741702440117519853644708976260003215410373536879856532040473103469877570863180475865397724645179726598011325708333136691597238869798679313438998488886680751083887452827135258012249034734321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tes.dwp.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39aa83d8164c1e243d3e4d0719321b5999443b02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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