www.veritassolicitors.co.uk

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 06:09:4f:a5:0c:8a:81:45:bb:c0:d6:e1:03:a8:f3:3c was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.veritassolicitors.co.uk

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:09:4f:a5:0c:8a:81:45:bb:c0:d6:e1:03:a8:f3:3c
Serial Number (int): 8023714033323074374252452059785261884
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 6f:36:28:18:2e:aa:da:0d:b7:e6:32:db:72:65:9a:e7:17:ac:c5:2c
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): d3:92:9b:85:eb:58:36:9c:29:2e:ad:c0:85:d5:86:db:0a:a8:91:65
Fingerprint (sha256): 40:33:9e:17:c6:81:2e:f0:af:4e:3e:b5:1e:ca:34:86:16:a5:26:bf:d9:f9:28:d8:2f:41:85:9b:c8:14:f6:a4

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.veritassolicitors.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.veritassolicitors.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.veritassolicitors.co.uk
veritassolicitors.co.uk

Other certificates including the domain name veritassolicitors.co.uk

(limited to 100 certificates)
veritassolicitors.co.uk
veritassolicitors.co.uk
veritassolicitors.co.uk
veritassolicitors.co.uk
veritassolicitors.co.uk
veritassolicitors.co.uk
veritassolicitors.co.uk
docs.veritassolicitors.co.uk
www.veritassolicitors.co.uk
drive.honeepot.com
veritassolicitors.co.uk
veritassolicitors.co.uk
veritassolicitors.co.uk
veritassolicitors.co.uk
veritassolicitors.co.uk
veritassolicitors.co.uk
veritassolicitors.co.uk
veritassolicitors.co.uk
quality.region-north.de
veritassolicitors.co.uk
veritassolicitors.co.uk
veritassolicitors.co.uk
docs.veritassolicitors.co.uk
veritassolicitors.co.uk
veritassolicitors.co.uk
veritassolicitors.co.uk
www.veritassolicitors.co.uk
veritassolicitors.co.uk

Certificate

The complete raw certificate details for www.veritassolicitors.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaL/pTyj8wPeYZ0u6sCp
NDw/ArJTppA90a/l6D7v7iqXyAixBY6oa5Q5dNF9ol/2DkstEUNWcm2Sv38oolzh
/E4bYfltJ3gJAaqOmFPu9K8cuU6c5wthow4biCSJ0GbJq4do5P4MwXgQ/+P2PqUr
e2dgwvAFf9vgeBx3J26TlPEmkC5jn7xAMl7orWd64JzBgsrf9sCflMHMTy7b2smc
5JObQS6YXZuoiDm2hFQXhwXcCsMRYtYiGZ6UafynSoe9XZuZqWSHlT95ueAXQXvM
i1lfKhM6j45t2jwqTq/Yu0ziu9Ipgn/biIGha5Srk7lXOXBFXwnogX3GdmqF504N
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8023714033323074374252452059785261884
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.veritassolicitors.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24444370471252345469980922503100511896496447942082590031198273767334798683822578211761564120213780735161023302510531387458640014166873924984655323049660182382791383382920571833989963707030086608718252405740500957891674150686448399918129431368830226800029159364618186757207296095550581290733737142190772389602967579865443895372565023557311617749091750187979651441227131723916517974698217157955380433279331179377208243995372193042356331027630629703601104626012544738140297954021874606065674244809923826573573742261581054985870447695134159199175136560976341431815067843420721415674719054650023270858553958052146929602013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f3628182eaada0db7e632db72659ae717acc52c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veritassolicitors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veritassolicitors.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0044c0d7c4a51cec203c32e0c9a552493f738256c613dd0b348f6bd92c22989cb5d59dadd2a7a285d0244286f768f810fc3337cb9fb7add3f87b4f629f9ef560bbc0c4863691d384f36669f1a67c256c9fb136325a3a28b3803e020516bd4c29d83555594d1336ad4f84acd9775e97608288f972b46cdde8e90d1b27c38c4b056a39dd85263761d553c193e9877eb37bff36e052c9242138f646fb9b28c683d3dc68c3471843369c2944337650281dd9d2c914e7db70e8c583389b984d7f1478d2dadfd514cb02ab2f1180262f1744442788314cbb65776e2f2be729346404d58e46300ea417bf2a64f6255361bd94525a94f315f125376b3590bad75cab499bd84ad99c6aca087a62d821c37d49a9ac51ab485eed878fc4d30bd01c0cdf9fa6756a68652d2072528563fa3dd6f806e52a5fa8d7a370b97f0a36abf648dd3d02d0c636e2901b5433ad8fb3b75252d81a6954be363904c77946d132d250d8c59e32e376d48e11864115a3148457a5cfaaebb3c924e7a8575fdf119df79f8e4513409d9b5af874283a0a776c5fb03691e86982f9b979aad3f0d5b8fd814df43a602ea1cc3c31490a6614568b7cfe9bf97886b2d4a85eca0b824e7623d5a7d6c8431146ea09fad72cbb515899eb4ca327e595ea51acb0b70d5043413eb19c33a6661f5ced0f4ec4c8a078f4af88a2a8f7c7e740cc7aff990d2d9c884e6fe9781e294e