www.intotheblue.co.uk

- Into The Blue Limited -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 09:57:9c:5e:0d:9e:24:d9:42:c2:3a:56:2d:20:c1:59 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Into The Blue Limited

Organization: Into The Blue Limited
Organization unit: IT
Locality: Westerham
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:57:9c:5e:0d:9e:24:d9:42:c2:3a:56:2d:20:c1:59
Serial Number (int): 12417953296316708281374202386507153753
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 81:53:a0:2b:db:2d:bf:27:92:0c:66:f9:ac:aa:c5:f4:7a:b7:f6:7a
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): b7:54:33:b5:49:7e:1b:88:f9:c7:83:a1:7c:56:c8:06:54:5f:61:23
Fingerprint (sha256): 2f:27:a3:a7:87:20:d2:68:c1:53:90:17:8c:60:79:2a:8c:b5:46:81:f7:56:59:88:90:ca:7a:bd:07:a6:43:9d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.intotheblue.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.intotheblue.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.intotheblue.co.uk
intotheblue.co.uk

Other certificates including the domain name intotheblue.co.uk

(limited to 100 certificates)
intranet.intotheblue.co.uk
intotheblue.co.uk
intranet.intotheblue.co.uk
intranet.intotheblue.co.uk
sni168662.cloudflaressl.com
sni168662.cloudflaressl.com
demo2019.intotheblue.co.uk
intranet.intotheblue.co.uk
intranet.intotheblue.co.uk
demo.intotheblue.co.uk
intotheblue.co.uk
intotheblue.co.uk
intranet.intotheblue.co.uk
www.intotheblue.co.uk
intranet.intotheblue.co.uk
www.intotheblue.co.uk
intranet.intotheblue.co.uk
www.intotheblue.co.uk
intranet.intotheblue.co.uk
intotheblue.co.uk
intranet.intotheblue.co.uk
intranet.intotheblue.co.uk
tools.intotheblue.co.uk
intranet.intotheblue.co.uk
intotheblue.co.uk
demo.intotheblue.co.uk
intotheblue.co.uk
www.intotheblue.co.uk
www.intotheblue.co.uk
blog.intotheblue.co.uk
intranet.intotheblue.co.uk
intranet.intotheblue.co.uk
intranet.intotheblue.co.uk
intranet.intotheblue.co.uk
intranet.intotheblue.co.uk
intranet.intotheblue.co.uk
intotheblue.co.uk
intranet.intotheblue.co.uk
intranet.intotheblue.co.uk
intranet.intotheblue.co.uk
intranet.intotheblue.co.uk
intranet.intotheblue.co.uk
intranet.intotheblue.co.uk
www.intotheblue.co.uk
blog.intotheblue.co.uk
intotheblue.co.uk
intranet.intotheblue.co.uk
intranet.intotheblue.co.uk
www.intotheblue.co.uk
www.intotheblue.co.uk
intranet.intotheblue.co.uk
intranet.intotheblue.co.uk
intotheblue.co.uk
portal.intotheblue.co.uk
intotheblue.co.uk
intranet.intotheblue.co.uk
intranet.intotheblue.co.uk
intranet.intotheblue.co.uk
intranet.intotheblue.co.uk
intranet.intotheblue.co.uk
intotheblue.co.uk

Certificate

The complete raw certificate details for www.intotheblue.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UrUC2hm3UjMcXSV5vSV
/nO5su3m5K8xXmZmvfBddGZp5eqH0ln79j60N03Hxr4fY2IsQGYZU3AsL3e0cIiZ
WxSCMlRifVBwsIVyTdASSttP+997QFrc5HqXxaBaLMcS/XBxkiSVfEndiUMjQpSB
y84qKhgMEbpskGuWq9mgRH8XyNBx/Gjm1o7ETIEVmoCmxNEpYeWHm/I+AI3dVgtZ
UV3D0OAXs+bIyB9cBFgQwPalZU0ZsOueRPkJhNJDmcEqwQcaWkWgifcg16SR1lO8
Tm7zu88wLx58k+klgaYQ2+19mVMoQM+GqR7Rgy48xxWXV4Ow40ugsCOz6audGFOz
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12417953296316708281374202386507153753
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-18 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Westerham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Into The Blue Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.intotheblue.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27935564607022504694123980093615109597374943746811653395488751175771303128795675318408128347260961358093999854826121268158429293151185153525799778370568235698042814845340072551602320609391067642780366194573247141077041497559048849858327025761798936552071035704324177320185618467620181450086957221364084807615034385424295610067583325404683325123699432191758000386610295904610377084456726690962844373636929747954317498749987188049454731153584591569532323525877577476014599338125009991586216350134639415924386878470985451632478740921860531821923682779381418637954424031385724074554487060431433056014612986171930694628319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8153a02bdb2dbf27920c66f9acaac5f47ab7f67a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intotheblue.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intotheblue.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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