isams.bedes.org

- St Bede's School Trust Sussex -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 09:ae:1f:2c:eb:90:cc:f7:ae:00:e0:84:40:ce:34:62 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

St Bede's School Trust Sussex

Organization: St Bede's School Trust Sussex
State / Province: East Sussex
Locality: Hailsham
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:ae:1f:2c:eb:90:cc:f7:ae:00:e0:84:40:ce:34:62
Serial Number (int): 12867143929090197250599723971122181218
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c1:d0:4c:e5:c3:d1:ab:13:02:a1:05:b4:a0:9c:b0:23:18:91:61:7f
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 33:29:3b:74:1c:4e:30:88:63:54:21:b8:4a:76:9a:4b:84:c0:7b:b8
Fingerprint (sha256): 37:cb:b9:07:7c:9d:f6:a8:cf:de:46:f0:27:18:70:37:8d:64:dd:78:0d:d1:d9:c2:79:f3:64:e1:72:81:83:d3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g3.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g3.crl

Check the revocation status for certificate isams.bedes.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for isams.bedes.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

isams.bedes.org

Other certificates including the domain name bedes.org

(limited to 100 certificates)
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
bedes.org
schoolportal.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
shop.bedes.org
shop.bedes.org
sports.bedes.org
shop.bedes.org
sports.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
contact.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
schoolportal.bedes.org
schoolportal.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
shop.bedes.org
shop.bedes.org
schoolportal.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
shop.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
portal.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
shop.bedes.org
contact.bedes.org
sni158254.cloudflaressl.com
helpdesk.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
bedes.org
sni158254.cloudflaressl.com
shop.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
helpdesk.hambroperks.com
elearning.bedes.org
sni158254.cloudflaressl.com
www.bedes.org
helpdesk.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
shop.bedes.org
sni158254.cloudflaressl.com
sni.cloudflaressl.com
shop.bedes.org
sni158254.cloudflaressl.com
staff.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
shop.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
isams.bedes.org
sports.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
assist.pentest.partners
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
portal.bedes.org
sni158254.cloudflaressl.com
schoolportal.bedes.org
shop.bedes.org

Certificate

The complete raw certificate details for isams.bedes.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv0VsWfgsAgYBtmppR3r
uK1aD+4w5xQhVnP9dVDJe99hwgNTHOkN42VyNt+d42gyj0hcdgFcUBJpZEKRnX1w
xGgtnAU9ULEgmwSiTTgR75FfM55RvC+WgBylUWyLMyp0JQKnUyfQkPk1CS1WvpFQ
udUHnFYyK01iEHufeoRuYv/8LqBqTf5ADMvmJ5McWHxB7CEFE7SHpUIIqbiCNjyx
gZamNQPLI+pc4SZ1KU3jzF1gG4FVk1HE3yuPykijHD6VhxtkPRKIy+Zt/8MDeVoB
b+GQvCLsfLuguyqYyatUmQiNxglMWY1Wfmyvkvh+ZyaULBvwux6PFCUePnvnJfrd
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12867143929090197250599723971122181218
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'East Sussex'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hailsham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St Bede's School Trust Sussex'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'isams.bedes.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23100172239639514191244242580048088012507299573705099149680077304563340168030838062645468570378362240483402741458396934731740896633011662148271275749464944044560285214126492124815948173643058294121816598005220238702427024142778645829714149623467247300128124426202917629707748894040929513118903851175454377844919900848839766898188260590269474731542852950989003810868056906491353960524274005886759513949328218101261848345565041479363749349542947489921288462793070281217689640811459692688323053339828044979314072705785410760738929634639812772931666975520798980517687100839662065281804841611917540308418456106442554006919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1d04ce5c3d1ab1302a105b4a09cb0231891617f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isams.bedes.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006deda11fba2540b5332424173a3acdbed4410f0e21488b9e455278d434a934c5f4ebd050c3e5db7dcf9ab32410115e672979f51f9fac56d364a287e2f206ab67bd89706a4c17c3dd77db6a7385d189bba0e330b7d94da5fb495e8a022a5afb07a190f7b196074da42557ce3940eff3941c08cfeaab299b961f2c45e6d5529ab0f73e0fd9d9b95b548833f9f45ba54c29dd8c54a38bb7b47172be7d593184b5241d361276e4170411df0c93a98ac27105b4e6476bbf6eaa77c358090bfb6a0fa9a868fd8eaf616ad228356340df7d762010cf94cc639fe4c27c7979d8beed85cc0caa1a0841844d138470e8a52fa2658debafdc2c571d5fba47feb1694c2ccfd2