Mail.policeconduct.gov.uk

- Independent Office for Police Conduct -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:c7:fb:3c:16:2c:d2:98:c0:82:46:23:b7:76:5f:76 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Independent Office for Police Conduct

Organization: Independent Office for Police Conduct
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:c7:fb:3c:16:2c:d2:98:c0:82:46:23:b7:76:5f:76
Serial Number (int): 13001414682275798446219362631197024118
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 25:1e:88:79:08:89:32:4d:40:db:ea:b3:2e:ac:5f:1d:3a:7d:4c:31
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): d6:4f:b6:1a:2f:83:ef:b0:06:1e:2a:2f:ad:89:fb:e5:3e:0b:8e:20
Fingerprint (sha256): 30:f8:65:81:b5:a8:cf:8f:e1:a6:4b:43:dc:2e:14:51:8e:5c:7a:06:df:38:d1:ea:5e:68:1f:70:fb:6e:30:8f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate Mail.policeconduct.gov.uk

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Mail.policeconduct.gov.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

Mail.policeconduct.gov.uk
Autodiscover.policeconduct.gov.uk
Hybrid.policeconduct.gov.uk

Other certificates including the domain name policeconduct.gov.uk

(limited to 100 certificates)
www.policeconduct.gov.uk
mail.policeconduct.gov.uk
iopc-cms.policeconduct.gov.uk
Mail.policeconduct.gov.uk
sts.policeconduct.gov.uk
Mail.policeconduct.gov.uk
ictsc.policeconduct.gov.uk
Mail.policeconduct.gov.uk
Mail.policeconduct.gov.uk
www.policeconduct.gov.uk
mail.policeconduct.gov.uk
policeconduct.gov.uk
www.policeconduct.gov.uk
policeconduct.gov.uk
sni.cloudflaressl.com
Mail.policeconduct.gov.uk
operationsmanual.policeconduct.gov.uk
policeconduct.gov.uk
policeconduct.gov.uk
ufbeta.policeconduct.gov.uk
policeconduct.gov.uk
ictsc.policeconduct.gov.uk
sts.policeconduct.gov.uk
Mail.policeconduct.gov.uk
remote.policeconduct.gov.uk
accesspool1.policeconduct.gov.uk
policeconduct.gov.uk
careershub.policeconduct.gov.uk
userfeedback.policeconduct.gov.uk
sts.policeconduct.gov.uk
remote.policeconduct.gov.uk
iopc-cms.policeconduct.gov.uk
sts.policeconduct.gov.uk
policeconduct.gov.uk
sni.cloudflaressl.com
www.policeconduct.gov.uk
jobsearch.policeconduct.gov.uk
policeconduct.gov.uk

Certificate

The complete raw certificate details for Mail.policeconduct.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13001414682275798446219362631197024118
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Independent Office for Police Conduct'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mail.policeconduct.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 729737092539642316917455857578267142759715488837655588758384521050284395378534162806073917504788895942909404426451337833477855342420506612024421104193539622506073333903750068164363831660000187632109351634829375572198392389625724910012266175309285487247074747624047444445023529848563534459144615197688913652784946969227893878160967875490302134028961809991139000517009860265895590190918918402958150361545398113652373125703688392813180818173959013784449907507112525161608270355065574550145105231774864869662053403654252570322751618014537268697360189783368644188693193284242637362409569416438433067010843437104321855422752490336467488871053730300362272240779324669190823838215388573306887769302780443423348554871203684876280974825754538641305615941821973756480940710128936145597305471989322622767693640753465261829846519096265137913098750000063458772646272455709351000492590875675653367850899149665590739462874699054388976862224185509658368968154495275394490264606338489935886053516131492168972711905231891147883699221695678218106523559685488120989352345039237571994767329184690566156849906350259989750163008183587742710583334993462746300344771320584587265215330093030434693339154873065714276163735868051286320801282973393528283584927559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							251e88790889324d40dbeab32eac5f1d3a7d4c31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Mail.policeconduct.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.policeconduct.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Hybrid.policeconduct.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bd7ff02110000040300463044022017932c5164311654c8fa8469b28ee964a26812fff39a3362b0263038e692dc7202202af0e680f678b780f21e16612cecdf5a7842cd09bed9a243e35ea2e7dc1f55aa00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bd7ff01dd0000040300473045022030698937c13491aeea6d788180204772418ec417f8cd634eb2af68febe7eab170221009a75f83694775e5ca54b0823a41669e8f128e3e9f4e2769a26c6bed899d2debe007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018bd7ff01d70000040300473045022100c0bb4c6ee53e72d97262278052b325f448e94181f5e266cb8f8be64eee6cff880220568e940d1a75409767b277ba7b8550ee7fc3c8adfc54525859a7353977868d6b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008001b3ff6c89522f36fc2648593f1f3191608c7f0a8d53975b8320bebf05bad75a4d3d19b5562577b2b02b23baa9dfc4dd70e7e56cef8a7d49dad001d791e6c3a8a378319eee5dd431539e1b45f08f2cf645358312b00f37cc4bb4700bab8ed52bc365cb630633dd5f0f3d8eb80100e705d5f617a52611222259f67b6b016910b7621cf5e7cfd782a06df8f7259cac561fcaef40a418bf5a3f780cf38d84b5a1cd007213a612c16794a66823fdd94868c8b8a19467e6b8db56b4c91bf90e5c12253586265061815a3deeec7690bf46241489f6200ff94de88ef9bd1558786571470543e18c25bf04a5ea89cdd7de604a96a79ccd0a1235ddcf7fe0ae2e170e85