unifi.scotthelme.co.uk

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 1b:71:99:9c:1b:57:93:8c:c1:19:38:c0:3b:d6:f3:d3 was issued on by SSL Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=unifi.scotthelme.co.uk

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1b:71:99:9c:1b:57:93:8c:c1:19:38:c0:3b:d6:f3:d3
Serial Number (int): 36479001007931843617052421908053029843
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: b0:f3:bc:fd:b5:1a:84:0c:62:34:01:dd:c8:0c:38:00:92:74:83:ce
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 87:28:07:4c:98:ee:74:31:7c:9b:0b:98:0d:d6:cf:b4:b5:48:b3:46
Fingerprint (sha256): 24:22:09:65:09:1d:76:b4:2d:b8:83:01:7c:71:69:0f:9c:12:72:40:7f:27:c9:bf:48:27:4a:c8:99:9e:5c:e3

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate unifi.scotthelme.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for unifi.scotthelme.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

unifi.scotthelme.co.uk

Other certificates including the domain name scotthelme.co.uk

(limited to 100 certificates)
scotthelme.co.uk
print.scotthelme.co.uk
hpkp.scotthelme.co.uk
ssl2653.cloudflare.com
hpkp.scotthelme.co.uk
sni101751.cloudflaressl.com
scotthelme.co.uk
sni36452.cloudflaressl.com
scotthelme.co.uk
sni101751.cloudflaressl.com
homeassistant.scotthelme.co.uk
sni45819.cloudflaressl.com
hpkp.scotthelme.co.uk
sni101751.cloudflaressl.com
scotthelme.co.uk
sni101751.cloudflaressl.com
sni101630.cloudflaressl.com
sni101751.cloudflaressl.com
scotthelme.co.uk
scotthelme.co.uk
ecdsa.scotthelme.co.uk
hpkp.scotthelme.co.uk
print.scotthelme.co.uk
hpkp.scotthelme.co.uk
sni101751.cloudflaressl.com
sni101751.cloudflaressl.com
sni101630.cloudflaressl.com
scotthelme.co.uk
sni101751.cloudflaressl.com
sni101751.cloudflaressl.com
home.scotthelme.co.uk
scotthelme.co.uk
home.scotthelme.co.uk
sni101751.cloudflaressl.com
rsa2048.scotthelme.co.uk
horizon.scotthelme.co.uk
horizon.scotthelme.co.uk
sni101630.cloudflaressl.com
sni36452.cloudflaressl.com
hpkp.scotthelme.co.uk
scotthelme.co.uk
scotthelme.co.uk
grafana.scotthelme.co.uk
sni101751.cloudflaressl.com
sni45819.cloudflaressl.com
sni101751.cloudflaressl.com
home.scotthelme.co.uk
sni101751.cloudflaressl.com
rsa2048.scotthelme.co.uk
hpkp.scotthelme.co.uk
foo.scotthelme.co.uk
unifi.scotthelme.co.uk
sni101751.cloudflaressl.com
sni36452.cloudflaressl.com
sni101751.cloudflaressl.com
scotthelme.co.uk
scotthelme.co.uk
sni101630.cloudflaressl.com
hpkp.scotthelme.co.uk
scotthelme.co.uk
sni36452.cloudflaressl.com
sni101751.cloudflaressl.com
scotthelme.co.uk
scotthelme.co.uk
scotthelme.co.uk
home.scotthelme.co.uk
sni101751.cloudflaressl.com
whatever.scotthelme.co.uk
sni101630.cloudflaressl.com
grafana.scotthelme.co.uk
sni101751.cloudflaressl.com
sni36452.cloudflaressl.com
foo.scotthelme.co.uk
scotthelme.co.uk
sni101751.cloudflaressl.com
ecdsa.scotthelme.co.uk
scotthelme.co.uk
rsa2048.scotthelme.co.uk
pihole.scotthelme.co.uk
horizon.scotthelme.co.uk
scotthelme.co.uk
scotthelme.co.uk
octoprint.scotthelme.co.uk
scotthelme.co.uk
scotthelme.co.uk
scotthelme.co.uk
sni101751.cloudflaressl.com
sni36452.cloudflaressl.com
sni36452.cloudflaressl.com
scotthelme.co.uk
sni36452.cloudflaressl.com
home.scotthelme.co.uk
sni45819.cloudflaressl.com
sni36452.cloudflaressl.com
scotthelme.co.uk
scotthelme.co.uk
unifi.scotthelme.co.uk
rsa2048.scotthelme.co.uk
home.scotthelme.co.uk
horizon.scotthelme.co.uk

Certificate

The complete raw certificate details for unifi.scotthelme.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36479001007931843617052421908053029843
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-03 23:50:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-15 23:50:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'unifi.scotthelme.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 770210517513272060400204863550122565632955973193424612197223232955050014167251569660070030688510867363482197849054902354830427682122403875702677727330544440481137650277497726875109442193479983713506386810012269516941487331097873787307333141625848997939678569759670996691426050294511661238509229231422256483593396779953236736965964310393677139933711345397692671284557075586053209819195992865635951185833873726697083264305384009910331250493686509013932517781808180851846414190011541023799752188808834865306741472356299675814871221901805049883036285117157616660646959464361562433932613220547449951815489426377259767840901970497772108212988323817056561397440574527937427561537417019505778734219853672471878539934175288039610484523345407013812065130656894546872839532076247940534444316517250619764345095714809982740901481668159597988341223556096046799617649902328015980521384345867283865373518986473480340192571925332265593609953101397907807228813582225156194473901361974537324736707083169423391209298923222576336172783059367485031745565995952521467216879546020085128066237691960407028214480595459612060069990722526500134608755400670416941418849495634635527914166176065260583098767192809053927946906516323503751561569083988332376325674817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unifi.scotthelme.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0f3bcfdb51a840c623401ddc80c3800927483ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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