www.tpos.co.uk

Issued by RapidSSL SHA256 CA - G2

About this certificate

This digital certificate with serial number 43:2c:de:6d:e2:d3:38:c7:20:14:cf:12:d4:36:66:7d was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.tpos.co.uk

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 43:2c:de:6d:e2:d3:38:c7:20:14:cf:12:d4:36:66:7d
Serial Number (int): 89291248180365584319156812707865716349
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 4c:f4:bf:e8:3b:be:c2:24:f3:1b:47:3b:b5:6e:48:8e:16:ab:af:12

Fingerprint (sha1): 28:96:fb:f5:17:d4:8d:3d:cf:e7:02:8a:e1:09:9f:91:06:cd:19:88
Fingerprint (sha256): 25:f8:25:de:4a:05:5a:b6:41:f4:8c:f0:3c:c3:18:6f:27:65:af:94:c6:13:77:a4:ea:bf:3c:56:53:d3:49:9f

Issuing Certificate URL: http://gs.symcb.com/gs.crt

Revocation information

OCSP Server: http://gs.symcd.com
CRL Distribution Point: http://gs.symcb.com/gs.crl

Check the revocation status for certificate www.tpos.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tpos.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tpos.co.uk
tpos.co.uk

Other certificates including the domain name tpos.co.uk

(limited to 100 certificates)
findmember.tpos.co.uk
findmember.tpos.co.uk
findmember.tpos.co.uk
*.tpos.co.uk
support.homeinstead.ie
*.tpos.co.uk
tpos.co.uk
www.tpos.co.uk
tpos.co.uk
tpos.co.uk
servicedesk.am-labor.de
tpos.co.uk
tpos.co.uk
tpos.co.uk
tpos.co.uk
tpos.co.uk
tpos.co.uk
tpos.co.uk
servicedesk.am-labor.de
mail.tpos.co.uk
mail.tpos.co.uk
tpos.co.uk
tpos.co.uk
mail.tpos.co.uk
selfserve.tpos.co.uk
tpos.co.uk
*.tpos.co.uk
tpos.co.uk
tpos.co.uk
selfserve.tpos.co.uk
tpos.co.uk
servicedesk.tpos.co.uk
tpos.co.uk
findmember.tpos.co.uk
tpos.co.uk
tpos.co.uk
support.homeinstead.ie
mail.tpos.co.uk
findmember.tpos.co.uk
tpos.co.uk
*.tpos.co.uk
www.tpos.co.uk
*.tpos.co.uk
*.tpos.co.uk
*.tpos.co.uk
soporte.klz.rf.gd
tpos.co.uk
tpos.co.uk
tpos.co.uk
servicedesk.tpos.co.uk
servicedesk.tpos.co.uk
servicedesk.tpos.co.uk
servicedesk.am-labor.de
tpos.co.uk
servicedesk.am-labor.de
tpos.co.uk
findmember.tpos.co.uk
tpos.co.uk
tpos.co.uk

Certificate

The complete raw certificate details for www.tpos.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 89291248180365584319156812707865716349
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.tpos.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 904468129654583708103160024358918898203788651554182140763510201349011899241530552486949364906825687944700588362885237118490377881572305055849051793920215292391087447511630135840050667027758700681074650622336749854242315383399570111617371677989054454194126303372553480609442395874332836963928803400382600207600555669494487797072361461318472093379274677431910531215666676236310827802159561189720804521698594959806157470231911435355043092687442106791604759805971796193546071166446218658707757606291249994767319274471210950424633981876226782918096695331708752122386806199888974994873011194957341162800809067508975140701260032210910769892415794197783354909626016802602550703586002678341896829476055749644952996298995465109533172167504077198502646935377972481580782390581727098524167485052718397097301107960798431131163854047031989424973524592302276904280416790187850179281714401877302843423674429522628749493697915895821288467911459418027521631440003521374604592837891044012940702425638837903338928910925740014863442136114907092658638831877725442284142422284081406737295747819720010156392061152238919955397161549267612405033265397791017783939964329536626752678941014498569895390635331851157238624780022844806441332305882075891440724944113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tpos.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpos.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cf4bfe83bbec224f31b473bb56e488e16abaf12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001568d32614b000004030047304502204e095568a251f318635e39f063c724f4f1d768cd7b8441ee779f185b8245c92c022100dd87e98a18b84ea189b3f1011b522bc0e39ec1b2f3cb8be769921896f685bb39007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001568d3261890000040300473045022008490f0c8ff58b3342e2fc372a8d94b204c403e9122e708ca918ee7d6dfdeaf7022100c787d7b92f39f49ea36ac45d22e31df0a4f581735d99c3656381b390584319b3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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