www.bdo.co.uk

- BDO LLP -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 09:db:72:d1:35:94:dd:42:b1:cb:38:39:7f:54:15:d3 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BDO LLP

Organization: BDO LLP
Organization unit: Marketing, Sales and Clients
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:db:72:d1:35:94:dd:42:b1:cb:38:39:7f:54:15:d3
Serial Number (int): 13102493744046823293580801477233087955
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c6:0d:5f:44:eb:6c:9c:aa:37:83:81:47:7b:f5:79:4f:51:54:d9:48
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 77:01:41:46:6d:cd:03:10:f4:d9:5e:ce:83:36:05:9b:7d:ae:3e:9f
Fingerprint (sha256): 3e:5c:a9:11:df:d9:03:1f:99:cd:9f:d2:d8:cc:92:4d:33:fe:74:88:cd:b6:17:30:de:cc:fd:2e:ed:58:35:c2

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.bdo.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bdo.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bdo.co.uk
bdo.co.uk

Other certificates including the domain name bdo.co.uk

(limited to 100 certificates)
sni.cloudflaressl.com
bdoextranet.bdo.co.uk
fs.bdo.co.uk
mail.bdo.co.uk
guestwifi.bdo.co.uk
bdosbc01HA.bdo.co.uk
ceros4.map.fastly.net
paws.bdo.co.uk
ceros4.map.fastly.net
gtlp.bdo.co.uk
ndes.bdo.co.uk
guestwifi.bdo.co.uk
*.bdo.co.uk
ceros4.map.fastly.net
BDO SERVICES LIMITED
www.bdo.co.uk
emos.bdo.co.uk
help.bdo.co.uk
pentanavision.bdo.co.uk
open.bdo.co.uk
guestwifi.bdo.co.uk
ceros4.map.fastly.net
*.exp.gumgum.com
adrms.bdo.co.uk
guestwifi.bdo.co.uk
adfs.bdo.co.uk
gtlp.bdo.co.uk
eportal.bdo.co.uk
ceros4.map.fastly.net
share.bdo.co.uk
careers.bdo.co.uk
bdo-dms.bdo.co.uk
brportal.bdo.co.uk
ceros4.map.fastly.net
share.bdo.co.uk
ndes.bdo.co.uk
ssl473150.cloudflaressl.com
www.bdo.co.uk
www.bdo.co.uk
insite.bdo.co.uk
ixbrl.bdo.co.uk
drhome.bdo.co.uk
*.bdo.co.uk
uatbdoextranet.bdo.co.uk
careers.bdo.co.uk
ceros4.map.fastly.net
bdoarchive.bdo.co.uk
apps.bdo.co.uk
ams.bdo.co.uk
apps.bdo.co.uk
proaudit.bdo.co.uk
p11dupdate.bdo.co.uk
support.bdo.co.uk
www.neweconomy.bdo.co.uk
ssl473150.cloudflaressl.com
ceros4.map.fastly.net
emos.bdo.co.uk
gtlp.bdo.co.uk
go.bdo.co.uk
www.neweconomy.bdo.co.uk
bdoextranet.bdo.co.uk
msllp.bdo.co.uk
brainspace.bdo.co.uk
*.bdo.co.uk
ams.bdo.co.uk
ras.bdo.co.uk
adfs.bdo.co.uk
www.msllpstage.bdo.co.uk
open.bdo.co.uk
ras.bdo.co.uk
*.exp.gumgum.com
brportal.bdo.co.uk
ceros4.map.fastly.net
*.exp.gumgum.com
reception2.bdo.co.uk
ceros4.map.fastly.net
BDO SERVICES LIMITED
ssl473150.cloudflaressl.com
ceros4.map.fastly.net
adfs.bdo.co.uk
mobileiron.bdo.co.uk
ceros4.map.fastly.net
share.bdo.co.uk
admin-bdoprivate.bdo.co.uk
eportalftp.bdo.co.uk
ceros4.map.fastly.net
ams.bdo.co.uk
ceros4.map.fastly.net
www.safr.bdo.co.uk
www.bdo.co.uk
ssl473149.cloudflaressl.com
www.bdo.co.uk
ceros4.map.fastly.net
*.exp.gumgum.com
emos.bdo.co.uk
apps.bdo.co.uk
epubs.bdo.co.uk
ceros4.map.fastly.net
www.bdo.co.uk
officewebapps.bdo.co.uk

Certificate

The complete raw certificate details for www.bdo.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13102493744046823293580801477233087955
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BDO LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Marketing, Sales and Clients'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bdo.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 726848257881591504046385525207209234229453239130278579802609513714651423074607046911456020095315259257424250457034537043755414236473844139191094217924665355910961599228837545741712088180327181875172120318146773800029794308057103612113502372250789946010359505451133652733754925126165379592145264289274378663257715650530568405768944048993822202792911285963584498192008489634364164534814207820305578765975700028789555335903516764494664427216419773070920131095136176185159160003243058154961332189768637231836618739712794528613349098058352221881084023050772778271943074329405208125524666763992034270672004729284789611583612102995131974215067088803711884010498325059323703920287579334850409062722960805052295477147234843337882045910585674566071732490142107829087824520679319447732441129649208970871770273746657600336885013184835595169323669208476064674004003402905220025204424669863851747059494550787423149568309244174521474181192813381718834494471592057597252434238934639205807061299609950814544912096691555282680258999437529768870311019685222832945792941225388705836754140228589579968288040948855050297231494800802382570502458222903159101792109054079759184929898897354576286144326825298872104278359775273712180947680350950300990129159329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c60d5f44eb6c9caa378381477bf5794f5154d948
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bdo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdo.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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