lal.org.uk

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 5b:58:cc:46:4a:a2:88:b7:11:1a:fc:36:d6:24:bb:53 was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lal.org.uk

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 5b:58:cc:46:4a:a2:88:b7:11:1a:fc:36:d6:24:bb:53
Serial Number (int): 121420812920607312533212758482845219667
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 27:7c:75:d3:a4:c7:3b:10:3d:54:93:d1:f7:81:c2:c2:9e:a8:7b:5d
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 1c:d7:53:d3:58:57:d8:45:8a:4c:51:73:f2:6b:97:71:ec:ed:2b:55
Fingerprint (sha256): 2e:96:fc:5b:10:3a:28:03:83:d0:af:5d:39:95:8a:bc:4d:57:a6:03:a6:8f:31:51:7c:40:50:e9:ea:80:18:aa

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/YAYYCkT9ggA
CRL Distribution Point: http://crls.pki.goog/gts1p5/7B0HEqii3U8.crl

Check the revocation status for certificate lal.org.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lal.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lal.org.uk
*.lal.org.uk

Other certificates including the domain name lal.org.uk

(limited to 100 certificates)
lal.org.uk
lal.org.uk
lal.org.uk
lal.org.uk
lal.org.uk
lal.org.uk
mkt.lal.org.uk
lal.org.uk
lal.org.uk
lal.org.uk
mkt.contek.pt
staging.lal.org.uk
lal.org.uk
lal.org.uk
lal.org.uk
lal.org.uk

Certificate

The complete raw certificate details for lal.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC0Tt4kfrjw29vJ22klx
Cyb873x5zpOtoL5YFzuAfDMPMif4via9SJJKVRMJ2nzgfAxoVtwKVHnuJLecg4H1
ldfvAMTeZrnzaeHZj74gmefbuyfJMtBFd2QFinXRDLhbzChmH7nwR+OEUZENfdTa
tX7X6ss/anxp3rXtjTZtlebCzXwWYTQJ9caTNbk7gSZ6EsL2eRq0FdL07RO9dKTy
cvzpGI9TJrMW/tDfXrLMqTwIowf7Hz5gKqn1BCOSmxHYmk9ofQeWYVoTzLfU7ELy
608Sb7r+NCuj27BLyB0OgJyYK6Qfwl3XyMpfLS6lq6BVsS53WLu0WXxfsdP43Bao
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 121420812920607312533212758482845219667
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 04:58:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 04:58:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lal.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25774842519744056257664756056294927054558677655686229070645094893865315561397131369390772583984334351342426447250230243433233750921937673074295502961067983490621170072863528728657556724953099874483478566055646018140645123277405674519061741737294565611559555399203885417768185184802340675011348378706157733823141741655648807149587460359204676990307410234979526281342918516354639781941090652237581939871815376731520409453514846274362613717125239940497815158520839209275264432284591104391863442962282548138899582445647306455655293938090362766700207459899145661004782304038058060997312010155516717502985604785472967977109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							277c75d3a4c73b103d5493d1f781c2c29ea87b5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/YAYYCkT9ggA'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lal.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lal.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/7B0HEqii3U8.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ea7af969d0000040300473045022100c5faeff7c60fb1da916f714eb0004636359f8075936d0ed4c3c70ca0aecccc51022069bd5bcb067069954d142f6b45405ffef88b926bd92611a367f8312be2b46795007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ea7af973a000004030046304402200f57b9f4093ab540e450fb7d6f42f6085b384c25fd2a76e7e36c92f3bbd7fd0602200aa38a66f39997717cf632d149af58f83ab3c4103d11594963ce297178800da2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004e0ba5affbb97c8791ed3dcc6e88186426bb94d8408f2ca3b93d8ac30f8ea3fa4798318de1f4ec61950c83ec8c2ef16e4c1305d40e0e6ae557160153a648b2698115d5036df04724d455ff6430dda6f5c8628c25146160ab0b0913201093920889ccf0cd2afdd5a195187d34a708ca28da6fdba952b0f1d091168cb135324e63de434cb0c21c3f0c54bba394443ac337395d6b8485b743b9b4c15f3a6d13e3e5c6db6a0b531177acad2b2655020bdbf8a3028d509c7e479fd296ceda57a37e8ce12172a9de7cd0a9c22ce8416f97ef2902e46960bbbe55a36f3d2feaebf5b7f4c5d549ccdc666a1ae6a593bba908446b07149e28d1cb14d547bf0ec2e6b91d2f