www.medicagroup.co.uk

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 2a:ce:29:47:16:f5:7f:06:76:a8:c9:1f:b2:cb:83:4f was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.medicagroup.co.uk

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2a:ce:29:47:16:f5:7f:06:76:a8:c9:1f:b2:cb:83:4f
Serial Number (int): 56898026186923386286341799332008395599
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 14:e7:fc:60:68:90:2c:0f:d7:1a:19:77:32:36:4f:42:e3:f8:0c:89
Fingerprint (sha256): 47:e1:e1:b7:f7:bf:e6:27:f7:69:17:07:0f:c9:fc:44:e9:2a:2b:5a:ae:34:a6:9b:fc:7f:c0:b8:be:27:26:62

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate www.medicagroup.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.medicagroup.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.medicagroup.co.uk
medicagroup.co.uk

Other certificates including the domain name medicagroup.co.uk

(limited to 100 certificates)
cas.medicagroup.co.uk
medicagroup.co.uk
*.medicagroup.co.uk
www.medica-reporting.co.uk
insight2.medicagroup.co.uk
*.medicagroup.co.uk
insight2.medicagroup.co.uk
nhportal.medicagroup.co.uk
auth.medicagroup.co.uk
medicagroup.co.uk
*.medicagroup.co.uk
www.medicagroup.co.uk
*.medicagroup.co.uk
investors.medicagroup.co.uk
www.medicagroup.co.uk
webvpn.medicagroup.co.uk
insight.medicagroup.co.uk
nhportal.medicagroup.co.uk
webvpn.medicagroup.co.uk
*.medicagroup.co.uk
webvpn.medicagroup.co.uk
www.medica.co.uk
www.medicagroup.co.uk
webvpn.medicagroup.co.uk
insight.medicagroup.co.uk
insight2.medicagroup.co.uk
*.medicagroup.co.uk
rd-ravpn.medicagroup.co.uk
auth-training.medicagroup.co.uk
vtigercrm.medicagroup.co.uk
medica-reporting.co.uk
medicaportal-training.medicagroup.co.uk
medicagroup.co.uk
hg-ravpn.medicagroup.co.uk
ravpn.medicagroup.co.uk
www.medica-reporting.co.uk
medicaportal.medicagroup.co.uk
insight2.medicagroup.co.uk
cas.medicagroup.co.uk
www.medicagroup.co.uk
medicagroup.co.uk
medica.co.uk
www.medicanet.co.uk
feedback.medicagroup.co.uk
www.medicagroup.co.uk
www.medicagroup.co.uk
cas.medicagroup.co.uk
medica.co.uk
*.medicagroup.co.uk
www.medicagroup.co.uk
*.medicagroup.co.uk
nhportal.medicagroup.co.uk
www.medicanet.co.uk

Certificate

The complete raw certificate details for www.medicagroup.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYFkDM4viDQQyY5/g5pT
C1k0xYocFKn89XYJznP5MCy51lVKeLYxk3x85L1R/+ldBpJx81lfcRNHE1XTXu84
rXsHZPcN6Tc/mE3rOWVCbv9zfx8P0fjU5lfT60pqWxaf/3t9lEmqMBWqcGTe0U/E
jZqfjA6xV0k+/N1nJ3yzT/ehVnT/N4ijWS6lb+pymejZ7EQ+tty+axSBWEgNeQZj
Q3N0KRtixPyQ9ObKjVow43KdBtZuZageOLo/cvF6GMfM/t0ivabPsBOQiVJ9F4SW
jZI5kd25jpSq141Xecz1dIYvphaAs3hrL2tiXgWjiEx0JDqfoRBfZutcnQfvvyww
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 56898026186923386286341799332008395599
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.medicagroup.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24427797850030736768021597151478226027071383275682853966443253198406690361977802662041448176309580704512704496921010663077106708546729188741718086384883430686709994894641837178151335129531140592238501042083591722890890005575180446497894016852984335785013834435124400625173298631058079559141838694393092753293236843283490773972080426014514228436119434477596660652028276132843581062080727549539867655106042243021220552447539232318977944514654807697489319483768438802574705392135775941366507223356851401445709951971599924432136431921341441488083495453599512296699837214779541145945551840763817253547517267744476248158281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medicagroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicagroup.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015438c870660000040300473045022067b6113b021c7b87e477a79ddf71b1ac419e47e84e101fc3910d19b75493e560022100ce0bd3b44901c7c45df81bec7ac74f3c25e8a07e24d0243beea89f313b3cd3b7007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015438c870730000040300483046022100c00e48663c365ac577ed41d621c3628d83f03a275fc196c30b7a2950e06c6f030221009389af9f8dd4860b99f4ab759e387378ae1ca6a9d32d277f43ea6a60f8f02475
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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