remote.northdevonhospice.org.uk

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0e:bc:7c:ec:e5:4f:21:c8:bd:ab:5e:8f:0a:b9:38:38 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=remote.northdevonhospice.org.uk

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:bc:7c:ec:e5:4f:21:c8:bd:ab:5e:8f:0a:b9:38:38
Serial Number (int): 19587877537998307918280721034968119352
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e1:b6:aa:a8:fb:c9:32:51:89:62:8b:98:a4:fc:39:eb:f6:8a:7c:8e
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): e2:a2:96:95:ba:4f:05:0b:ad:73:14:61:e2:5f:ac:4d:12:9b:dd:b8
Fingerprint (sha256): 4a:31:25:c9:f8:81:a9:41:35:42:27:68:6c:00:ec:b2:97:ef:9e:0d:23:57:a8:40:19:b0:bc:7f:c8:29:11:4d

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate remote.northdevonhospice.org.uk

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for remote.northdevonhospice.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

remote.northdevonhospice.org.uk
ndhrdscb01.northdevonhospice.org.uk
ndhrdsgw01.northdevonhospice.org.uk
ndhrdssh03.northdevonhospice.org.uk
ndhrdssh01.northdevonhospice.org.uk
ndhrdssh02.northdevonhospice.org.uk

Other certificates including the domain name northdevonhospice.org.uk

(limited to 100 certificates)
webmail.northdevonhospice.org.uk
*.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
secure.northdevonhospice.org.uk
www.northdevonhospice.org.uk
www.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
www.northdevonhospice.org.uk
remote.northdevonhospice.org.uk
remote.northdevonhospice.org.uk
www.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
remote.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
www.northdevonhospice.org.uk
grapevine.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
*.northdevonhospice.org.uk
www.northdevonhospice.org.uk
webmail.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
*.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
*.northdevonhospice.org.uk
secure.northdevonhospice.org.uk
grapevine.northdevonhospice.org.uk
grapevine.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
grapevine.northdevonhospice.org.uk
secure.northdevonhospice.org.uk
grapevine.northdevonhospice.org.uk
secure.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
donate.northdevonhospice.org.uk
donate.northdevonhospice.org.uk

Certificate

The complete raw certificate details for remote.northdevonhospice.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv55jdqaw58FGtg5J/VzG
weohOC7aeIEzTbaxXBIV2RVxYDaD6xKKHugV0bj0QWZbUk99GEXQvUK4G/9d6Oqb
MpqQBIgxdPxPSBh2C6IQdma0HjRkmuOcA4OLLCDkcYN7nzuiT44IoCAlX9/F2FNJ
wF1WlKf7a1E2Jj3kLSeVQPGbt6dRY1BVaaXhK+ndgZKBPJ/NSLLyuhd2Ix2P2nSI
ig5bneDiJNCaT189K4y5alZK7XDE5S4n/80qwDw9Ed5W03LAjmGGt826Jbel7P+z
lVi57VxY29yuqDdRY+BAdV78oy+BKE5adWDqdWVuVMGt/p5vlsieuj/vlyiz2uEt
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19587877537998307918280721034968119352
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'remote.northdevonhospice.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24189620543263825077194267666570086061110872216821221232195921259159141002821991263200339076529292331842372821835389005420516878199144283208443887714826229354697210953133055886189679440381957688287775402568667106151306318309414139334419953951838124344961182031414788893711766326644363391247048346784819422181867379009517776572033011659161991296461257416503522953878079635768463338548246079443583647441733463559834108774713405178953490844360503943363797998902256485306219827515113159333741067082299037289873448072040995684946735503567282514543424167063236494772319631519189992658636455822325083716414191280608812019053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1b6aaa8fbc9325189628b98a4fc39ebf68a7c8e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (221 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.northdevonhospice.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndhrdscb01.northdevonhospice.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndhrdsgw01.northdevonhospice.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndhrdssh03.northdevonhospice.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndhrdssh01.northdevonhospice.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndhrdssh02.northdevonhospice.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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