childrens.mycareinbirmingham.org.uk
Issued by RapidSSL SHA256 CA
About this certificate
This digital certificate with serial number 01:d1:30:80:7b:58:cd:16:a6:71:fe:1d:20:25:dc:fa was issued on by GeoTrust Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=childrens.mycareinbirmingham.org.uk
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:d1:30:80:7b:58:cd:16:a6:71:fe:1d:20:25:dc:faSerial Number (int): 2415401774258482136384777637887073530
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f
Fingerprint (sha1): 86:c9:ca:53:15:de:98:d3:7f:df:e9:1f:46:bc:c7:cd:e2:59:7c:7b
Fingerprint (sha256): 30:09:11:38:32:32:1d:37:a8:41:70:e2:3a:71:f8:8a:c5:30:da:ce:81:2e:22:df:ce:14:bb:ef:2f:1f:07:9e
Issuing Certificate URL: http://gp.symcb.com/gp.crt
Revocation information
OCSP Server: http://gp.symcd.comCRL Distribution Point: http://gp.symcb.com/gp.crl
Check the revocation status for certificate childrens.mycareinbirmingham.org.uk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for childrens.mycareinbirmingham.org.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
childrens.mycareinbirmingham.org.uk
Other certificates including the domain name mycareinbirmingham.org.uk
(limited to 100 certificates)
www.mycareinbirmingham.org.uk
childrensmarketplace.mycareinbirmingham.org.uk
childrens.mycareinbirmingham.org.uk
sso.childrensmarketplace.mycareinbirmingham.org.uk
marketplace.mycareinbirmingham.org.uk
needsandgoals.mycareinbirmingham.org.uk
needsandgoals.mycareinbirmingham.org.uk
childrensmarketplace.mycareinbirmingham.org.uk
sso.childrensmarketplace.mycareinbirmingham.org.uk
childrens.mycareinbirmingham.org.uk
marketplace.mycareinbirmingham.org.uk
marketplace.mycareinbirmingham.org.uk
www.mycareinbirmingham.org.uk
childrens.mycareinbirmingham.org.uk
childrens.mycareinbirmingham.org.uk
sso.childrensmarketplace.mycareinbirmingham.org.uk
needsandgoals.mycareinbirmingham.org.uk
needsandgoals.mycareinbirmingham.org.uk
marketplace.mycareinbirmingham.org.uk
marketplace.mycareinbirmingham.org.uk
www.mycareinbirmingham.org.uk
testchildrens.mycareinbirmingham.org.uk
childrensmarketplace.mycareinbirmingham.org.uk
childrensmarketplace.mycareinbirmingham.org.uk
sso.childrensmarketplace.mycareinbirmingham.org.uk
www.mycareinbirmingham.org.uk
childrensmarketplace.mycareinbirmingham.org.uk
childrens.mycareinbirmingham.org.uk
sso.childrensmarketplace.mycareinbirmingham.org.uk
marketplace.mycareinbirmingham.org.uk
needsandgoals.mycareinbirmingham.org.uk
needsandgoals.mycareinbirmingham.org.uk
childrensmarketplace.mycareinbirmingham.org.uk
sso.childrensmarketplace.mycareinbirmingham.org.uk
childrens.mycareinbirmingham.org.uk
marketplace.mycareinbirmingham.org.uk
marketplace.mycareinbirmingham.org.uk
www.mycareinbirmingham.org.uk
childrens.mycareinbirmingham.org.uk
childrens.mycareinbirmingham.org.uk
sso.childrensmarketplace.mycareinbirmingham.org.uk
needsandgoals.mycareinbirmingham.org.uk
needsandgoals.mycareinbirmingham.org.uk
marketplace.mycareinbirmingham.org.uk
marketplace.mycareinbirmingham.org.uk
www.mycareinbirmingham.org.uk
testchildrens.mycareinbirmingham.org.uk
childrensmarketplace.mycareinbirmingham.org.uk
childrensmarketplace.mycareinbirmingham.org.uk
sso.childrensmarketplace.mycareinbirmingham.org.uk
www.mycareinbirmingham.org.uk
Certificate
The complete raw certificate details for childrens.mycareinbirmingham.org.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIElzCCA3+gAwIBAgIQAdEwgHtYzRamcf4dICXc+jANBgkqhkiG9w0BAQsFADBC MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS UmFwaWRTU0wgU0hBMjU2IENBMB4XDTE3MDgwMjAwMDAwMFoXDTE5MDkwMTIzNTk1 OVowLjEsMCoGA1UEAwwjY2hpbGRyZW5zLm15Y2FyZWluYmlybWluZ2hhbS5vcmcu dWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Hy/hu6/DpJVojPRk Zkf8/1gauhx18BaMTzNqSRutmbNWQySJjVhbnOE7kkRLVuareTz0tdtCEkVYhk1b 88eJa5hV+EmdSrTEez/V12f4rqvqcZ0akgSpHxKyjA9rwXn5bozDvHR+65Tvbpr+ 8SkU0ICGs0IEpYs9Vzy1ulMNs2wXMEzlipehoG2wEy4vu7Vqlq24vjQi5zVCyhHw UrScrjDRL6UDzd5XScJtPTGg5onfqjTyJAntF8Blp+ILAQZCbOxW0c1QUweqSvRp c7/3l44jg+WNsprGOvqdlP/BlWUC+/0HeHmMYqLweTuzyEqVKeUkXThxhTts96hg cbLnAgMBAAGjggGbMIIBlzAuBgNVHREEJzAlgiNjaGlsZHJlbnMubXljYXJlaW5i aXJtaW5naGFtLm9yZy51azAJBgNVHRMEAjAAMCsGA1UdHwQkMCIwIKAeoByGGmh0 dHA6Ly9ncC5zeW1jYi5jb20vZ3AuY3JsMG8GA1UdIARoMGYwZAYGZ4EMAQIBMFow KgYIKwYBBQUHAgEWHmh0dHBzOi8vd3d3LnJhcGlkc3NsLmNvbS9sZWdhbDAsBggr BgEFBQcCAjAgDB5odHRwczovL3d3dy5yYXBpZHNzbC5jb20vbGVnYWwwHwYDVR0j BBgwFoAUl8InUJ7CyewMiDLIfK3ipgFP2m8wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBXBggrBgEFBQcBAQRLMEkwHwYIKwYB BQUHMAGGE2h0dHA6Ly9ncC5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9n cC5zeW1jYi5jb20vZ3AuY3J0MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQBmnTjUj9i6VkNn2pXqRgRzFY5AC97Db2j/tpYMMHLLcrFtNeRe I8mRzfRQTXy2QLebIM/tows9T38S2zxpBIxxA4DzDGka17iEES5QYhVxe1/D+fWS HwakImpmMKb+dNxHoI9n3xhw3GthTozyfdyhS/wUO6LodD73TEDvLa2bhkfflT+5 vRQDI6GT+iEnhoYE9NbMmm9a5AtqpsaGzeLdMQjMxOCvhDFvN2aPWJuggQk78p/h 4vjGLVADdTPqS/DsKt3XDxanEzJeTcRoAukhMKGmHQMLcrJMhSq7FDplzgrh5K5n c4xgdudZXni6MtKwUVAEVbaq2tPp+fnjlOrb -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB8v4buvw6SVaIz0ZGZH /P9YGrocdfAWjE8zakkbrZmzVkMkiY1YW5zhO5JES1bmq3k89LXbQhJFWIZNW/PH iWuYVfhJnUq0xHs/1ddn+K6r6nGdGpIEqR8SsowPa8F5+W6Mw7x0fuuU726a/vEp FNCAhrNCBKWLPVc8tbpTDbNsFzBM5YqXoaBtsBMuL7u1apatuL40Iuc1QsoR8FK0 nK4w0S+lA83eV0nCbT0xoOaJ36o08iQJ7RfAZafiCwEGQmzsVtHNUFMHqkr0aXO/ 95eOI4PljbKaxjr6nZT/wZVlAvv9B3h5jGKi8Hk7s8hKlSnlJF04cYU7bPeoYHGy 5wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2415401774258482136384777637887073530 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'childrens.mycareinbirmingham.org.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23748180235317466944377751807631454474553297957891753795905919322871940901044806370648133667624123233912312409696060976342470034543639754161046993983716061828543238950690666509405356882431447844833742327344457061365633357734189014593365250065110137624206744888477200767873198530998425732717982982779931861942547723975421857323858802692393555289872730998677031837213915652191606935428507709495946795349879250505388024015316506424351692647926264930594226091375773350150068605890597126563672640887833154072102057256941324949524098380580370007428768425305903910478676665439128256216220840865352067006346779321964178813671 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childrens.mycareinbirmingham.org.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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