*.ocubis.co.uk

Issued by RapidSSL Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 05:42:12:25:5c:7f:a2:fc:62:e0:37:59:a4:b6:6e:98 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.ocubis.co.uk

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:42:12:25:5c:7f:a2:fc:62:e0:37:59:a4:b6:6e:98
Serial Number (int): 6989199615029680907579461224633888408
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 1f:e4:c0:9a:ff:35:8b:8c:ff:2b:e1:ea:58:56:d0:60:c0:59:aa:d0
AuthorityKeyId: f0:9c:85:fd:a2:9f:7d:8f:c9:68:bb:d5:d4:89:4d:1d:be:d3:90:ff

Fingerprint (sha1): 1f:e5:14:27:fe:80:48:18:db:f9:85:bb:e6:48:37:e1:a3:a3:76:e0
Fingerprint (sha256): 47:73:73:1b:dc:52:1b:cc:22:bf:57:61:ec:eb:17:ef:2f:07:29:03:68:49:da:34:e3:11:d4:c6:ec:31:97:d7

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate *.ocubis.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ocubis.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ocubis.co.uk
ocubis.co.uk

Other certificates including the domain name ocubis.co.uk

(limited to 100 certificates)
servicedesk.usspeaking.com
ithelpdesk.dccoilireland.com
helpdesk.hlnsc.ac.uk
ithelp.visionrt.com
servicedesk.usspeaking.com
servicedesk.hermesairports.com
helpdesk.kleen-tex.eu
itdesk.mkspamp.com
support.erm.com
it.littlegarth.org
helpdesk.kleen-tex.eu
servicedesk.hafenwien.com
itservice.wearebulletproof.com
support.erm.com
servicedesk.danbred.com
ithelpdesk.farnboroughairport.com
ithelp.visionrt.com
helpdesk.troax.com
vpn.ocubis.co.uk
ithelpdesk.farnboroughairport.com
servicedesk.kuits.com
soporte.llorenteycuenca.com
ithelpdesk.ocubis.co.uk
ithelpdesk.farnboroughairport.com
ithelpdesk.dccoilireland.com
*.ocubis.co.uk
cau.sas-agri.com
servicedesk.vhg.co.uk
support.erm.com
ithelpdesk.dccoilireland.com
servicedesk.hermesairports.com
ocubis.co.uk
servicedesk.hermesairports.com
ithelpdesk.dccoilireland.com
ithelpdesk.farnboroughairport.com
helpdesk.fast.eu
helpdesk.kleen-tex.eu
it.littlegarth.org
ithelpdesk.dccoilireland.com
ithelpdesk.farnboroughairport.com
it.littlegarth.org
servicedesk.hafenwien.com
portalgestion.gruposiete.es
ithelpdesk.dccoilireland.com
servicedesk.nilgosc.org.uk
techsupport.mickgeorge.co.uk
soporte.llorenteycuenca.com
servicedesk.kuits.com
servicedesk.hermesairports.com
servicedesk.hermesairports.com
helpdesk.criticaltechworks.com
soporte.llorenteycuenca.com
ithelpdesk.dccoilireland.com
itdesk.mkspamp.com
vpn.ocubis.co.uk
servicedesk.hermesairports.com
support.erm.com
support.jjhousing.co.uk
helpdesk.hlnsc.ac.uk
ithelpdesk.holmes-hills.co.uk
ithelpdesk.dccoilireland.com
servicedesk.nilgosc.org.uk
ithelpdesk.farnboroughairport.com
helpdesk.usborne.co.uk
ithelpdesk.farnboroughairport.com
servicedesk.groupe-r.ch
ithelpdesk.farnboroughairport.com
servicedesk.hermesairports.com
servicedesk.usspeaking.com
servicedesk.usspeaking.com
helpdesk.troax.com
itsupport.alphaplusgroup.co.uk
helpdesk.troax.com
helpdesk.troax.com
servicedesk.fynbus.dk
helpdesk.fsbtech.com
soporte.llorenteycuenca.com
servicedesk.hermesairports.com
helpdesk.fast.eu
itdesk.mkspamp.com
ithelpdesk.holmes-hills.co.uk
ithelpdesk.ocubis.co.uk
ithelpdesk.ocubis.co.uk
servicedesk.hermesairports.com
ithelpdesk.farnboroughairport.com
helpdesk.hlnsc.ac.uk
helpdesk.kleen-tex.eu
servicedesk.hermesairports.com
ithelpdesk.farnboroughairport.com
it.littlegarth.org
helpdesk.hlnsc.ac.uk
support.claytonglass.co.uk
itsupport.clinisys.com
servicedesk.hermesairports.com
ithelpdesk.holmes-hills.co.uk
ithelpdesk.ocubis.co.uk

Certificate

The complete raw certificate details for *.ocubis.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6989199615029680907579461224633888408
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ocubis.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 843937698779736921511764794056850582359646705965646925782301068361146683675572389569394923663019931146423371104809340758527513189366066981434722858774514651465635065267726277586628536868832967445107005387956856034027296405697788645449294022886433137386716687593115978212311054251690649865271594632549397933578173489436740888721905627709491133909923054469659521095596855945136878698352443558681493313355710550628933691325010123901456983186690435720132440555813774912186534540657411722700740137518872173891598295632149228377461250995361825080590363385636031682473096002775658017644391481948149530616735935089262504358050718528937007759108949553542043343221538674895576269866117088407269552445381888010715427014240816859157215642276875061650476214972658491854588893571304092442092975336615034752787491707381952199670777389771788089478489285597430785843713215826203572198297386806546025008626793314984989889644821627457140275197065680516290621092106368150184290050364133374884754987249848382731277167589826347192721903128333764941802136527203200626259705272160501099528246781177816699822783606573993144354157854587319927942812036336901129993421783505365984624674009900601968050000134973496863848457569923895808429660301486786683396382249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f09c85fda29f7d8fc968bbd5d4894d1dbed390ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1fe4c09aff358b8cff2be1ea5856d060c059aad0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocubis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocubis.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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