justincraig.ac.uk

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number c7:26:5d:d1:19:04:82:c1:11:15:2a:e5:c5:57:42:61 was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=justincraig.ac.uk

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): c7:26:5d:d1:19:04:82:c1:11:15:2a:e5:c5:57:42:61
Serial Number (int): 264715581272344265662245149755496153697
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 51:3a:e9:83:93:88:a4:2b:88:b6:85:13:c9:77:58:ed:89:6d:5a:4c
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 6e:87:3b:68:12:b0:5e:71:75:47:50:d1:23:91:27:d3:c4:d7:0c:b6
Fingerprint (sha256): 2c:89:3b:07:36:f1:77:d1:5a:f7:66:62:b9:4c:a3:0d:c7:cf:19:67:00:0f:26:c1:c2:bc:5b:4a:7d:81:8b:ec

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/5pYkS-dl8xU
CRL Distribution Point: http://crls.pki.goog/gts1p5/RBokR26WdXw.crl

Check the revocation status for certificate justincraig.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for justincraig.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

justincraig.ac.uk
*.justincraig.ac.uk

Other certificates including the domain name justincraig.ac.uk

(limited to 100 certificates)
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
static1.justincraig.ac.uk
sni43344.cloudflaressl.com
static2.justincraig.ac.uk
static1.justincraig.ac.uk
sni.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
justincraig.ac.uk
justincraig.ac.uk
static2.justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
sni.cloudflaressl.com
*.justincraig.ac.uk
*.justincraig.ac.uk
sni.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
*.justincraig.ac.uk
sni43344.cloudflaressl.com
justincraig.ac.uk
*.justincraig.ac.uk
static1.justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
static2.justincraig.ac.uk
justincraig.ac.uk
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
static1.justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
static1.justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
static2.justincraig.ac.uk
sni43344.cloudflaressl.com
static2.justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
*.justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
static1.justincraig.ac.uk
sni.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
static2.justincraig.ac.uk
sni43344.cloudflaressl.com
*.justincraig.ac.uk
justincraig.ac.uk
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com

Certificate

The complete raw certificate details for justincraig.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTTZI+cBhkE4LiRR7BOx
M6uSQN5XdUcSOV7Ko/XFX+QGtrgSslw5tQsKmMp9t2bQXQjXpd9EYOe08cVBa7Tt
VY/q4XGsauOs001jr0BHZtAQ4bez9J6HuAwp9fTKsCpCAQylm62XITISlvzYQ4bv
Xcuqh0JpLsd+eXgU+UNse7yUgXY1Ykk6pCMEYf77SrD1oMLX5TpsXH6FqaeF4RJS
YkxPpvWcoPy48HFCG3GL5hykluRwWBcfSAKjwKOJEXZDSOBHq2PoLAYiPuwu00Y6
6EgIvQHAUxT6NLdxu2bAOR6T7G9Nqb0WucYZ5M/ewzqKU6n3LpMVvMAdzSVO237X
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264715581272344265662245149755496153697
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-25 21:14:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 21:14:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'justincraig.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25399959718893158162933949826487527070708432111263611746162361503951284504755047929523157582128787090663881001276745133514943570994523710245158533938701535901232085146099506186922741358070004058327134513545641471072313439189789680955472103489905158496514652108444860518641346344255625719051567040787441823346287390340195891275547955542599497455261426307677933298752934086054696178371373238496294687694216427281743389876831623309507200398879874468674380146907888661507737813570960930735385318446509535492154955423093157345729257623881915982184120576240096359758826844674973236635887784413003071426288248111217464235821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							513ae9839388a42b88b68513c97758ed896d5a4c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/5pYkS-dl8xU'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justincraig.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justincraig.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/RBokR26WdXw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018de2551fb000000403004730450220731809d4185c9bab6beca46f0a8a2029f764f7b97f4167f08268a9979f54b164022100980714710a9d0e01e0cc8f91fc0be0192f8e5ae13cf0d9c57aab1d871c6af4e50076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018de2551fe70000040300473045022046ca3c0b4bf6206182da39b6e90d99dd2ae2490b28948987b5fe8a948c3450aa022100d6b6266ac88c3dcc7b2c49a0e1894b632016d1af039ea77c481e60977146e62a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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