wessex-extranet.co.uk

- WESSEX ADMINISTRATION SERVICES LIMITED -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 01:80:e7:4d:c4:59:19:6d:32:54:fd:94:f0:a0:71:f5 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

WESSEX ADMINISTRATION SERVICES LIMITED

Organization: WESSEX ADMINISTRATION SERVICES LIMITED
Locality: Winchester
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:80:e7:4d:c4:59:19:6d:32:54:fd:94:f0:a0:71:f5
Serial Number (int): 1998533391631107339990950766503293429
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 61:2a:a0:7a:31:3a:f2:c5:ac:17:13:c7:73:7a:02:48:f3:e0:68:20
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 05:24:4d:41:93:29:c8:60:af:07:45:ea:52:bc:64:f5:3f:ac:4d:58
Fingerprint (sha256): 31:00:cc:10:97:aa:e4:00:0d:81:ec:05:6f:58:1f:62:31:78:4f:0c:2d:21:a3:19:d2:db:26:80:13:e4:57:1c

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate wessex-extranet.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wessex-extranet.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wessex-extranet.co.uk
www.wessex-extranet.co.uk

Other certificates including the domain name wessex-extranet.co.uk

(limited to 100 certificates)
wessex-extranet.co.uk
wessex-extranet.co.uk
wessex-extranet.co.uk
wessex-extranet.co.uk
wessex-extranet.co.uk
wessex-extranet.co.uk
wessex-extranet.co.uk
wessex-extranet.co.uk
wessex-extranet.co.uk
wessex-extranet.co.uk
wessex-extranet.co.uk
wessex-extranet.co.uk
wessex-extranet.co.uk
wessex-extranet.co.uk
wessex-extranet.co.uk

Certificate

The complete raw certificate details for wessex-extranet.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24tW6wMEChtVvceIwuTE
qw60HwcCXACFjQ6UTumLOBGQJtt+D0rVIK5mmumsXM/sGKngLGQpL3I8RkTvfq8/
QyqmFCd+hC52NJOdQg1FYSrt5j5gYLzVPEE7p6h/qnbYcNoWtkBRaZF00KqWNweL
UbVUTSrFrpJCYQuPDPHXZEDoInSEgGa0vxq7bjfsNtHd8kn3GoB/jHX3RWFykk+f
nUHBZ/y+YhfKzIWicKiAz351FgnmGTnNoaWjlaeRaNd1AeCjzCr5Vtj14/d6ODd+
xSX90vNCzGqDnwYwMuwKTMQbff4QrsU1LfNLWS7fvu8W1r2lcwIKUI6Kdtyz07RI
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1998533391631107339990950766503293429
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Winchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WESSEX ADMINISTRATION SERVICES LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wessex-extranet.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27714899667491878689478091143119986035822692857924552418654315798574505734465737516431974360111572850622145425517932695448301994792262027978738041836471356537952584019795004036707451185617097354704792242891584757151871184782068663059258556174861934770038153880042336571893351694183560728739284936543329974790034764027761488226346080242214415461475822530379524275571292494603061174720963689118910429568158381085201597115597303033417211203895542471716282429683941552649538077064189404974831053366016351396351720597983320485487497375811367566493323226642663253136552812353163243651717293762860882995144147412901841619051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							612aa07a313af2c5ac1713c7737a0248f3e06820
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wessex-extranet.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wessex-extranet.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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