*.ras.sentinel.scc.com

- SPECIALIST COMPUTER CENTRES PLC -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 5e:26:72:7f:b4:b5:9d:8e:29:11:d0:2c was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SPECIALIST COMPUTER CENTRES PLC

Organization: SPECIALIST COMPUTER CENTRES PLC
State / Province: West Midlands
Locality: Birmingham
Country: GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5e:26:72:7f:b4:b5:9d:8e:29:11:d0:2c
Serial Number (int): 29138070809888824000947277868
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: e3:c3:fa:b4:ce:65:80:a5:ad:e6:f1:4a:b6:a5:25:b4:d2:29:15:59
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 20:37:93:e3:af:d3:3d:7d:5b:ea:e0:3c:1d:15:ed:05:93:74:fb:eb
Fingerprint (sha256): 4b:4f:55:82:22:bd:cd:1d:97:c8:e1:d1:6b:24:71:87:76:bc:8a:30:67:01:82:d8:78:1d:39:c9:a5:ca:85:6b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.ras.sentinel.scc.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ras.sentinel.scc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ras.sentinel.scc.com
ras.sentinel.scc.com

Other certificates including the domain name scc.com

(limited to 100 certificates)
selfserve.scc.gsi.gov.uk
*.assyst.scc.com
servicesportal.scc.com
*.portal.scc.com
evie-cms.scc.com
*.fr.scc.com
portal.scc.com
servicesportal.scc.com
*.scc.com
webmail.sch-group.com
servicesportal.scc.com
vietnam.scc.com
mailedge1.scc.com
secure.sentinel.scc.com
mdmtest.sentinel.scc.com
iag01.ps.scc.com
lifecycle.scc.com
adfs.scc.com
o365.scc.com
servicesportal.scc.com
www.etc-dist.co.uk
*.portal.scc.com
ocsfed.sch-group.com
Tsm.scc.com
bs1.scc.com
live.scc.com
io.scc.com
portal.scc.com
www.scc.com
myfims.fr.scc.com
lifecycle.scc.com
lifecycle.scc.com
france.scc.com
punchout.scc.com
io2.scc.com
esharepoint.scc.com
*.portal.scc.com
www.scc.com
france.scc.com
es.scc.com
portal.scc.com
netbox.fr.scc.com
myscc-test.scc.com
lifecycle.scc.com
servicesportal.scc.com
*.assyst.scc.com
assyst.scc.com
*.fr.scc.com
mailedge1.scc.com
myscc.scc.com
bs1.scc.com
primus.scc.com
flexrecruitment.scc.com
publicsector.scc.com
*.demo.scc.com
certforssl247apiB.scc.com
mdmtest.sentinel.scc.com
scc.com
cp.sentinel.scc.com
lifecycle.scc.com
*.portal.scc.com
*.fr.scc.com
myscc.scc.com
wireless.scc.com
live.scc.com
sccconferencing.scc.com
access.scc.com
www.scc.com
myscc.scc.com
cp.sentinel.scc.com
timesheets.scc.com
evie-cms.scc.com
sccwebconf.scc.com
timesheets.scc.com
o365.scc.com
email.sentinel.scc.com
lifecycle.scc.com
securemail.sentinel.scc.com
france.scc.com
o365.scc.com
*.ras.sentinel.scc.com
sharepoint.scc.com
io.scc.com
esharepoint.scc.com
live.scc.com
webapp.scc.com
*.portal.scc.com
webmail.sch-group.com
*.fr.scc.com
*.demo.scc.com
live.scc.com
*.portal.scc.com
access.scc.com
*.portal.scc.com
lifecycle.scc.com
sccwebconf.scc.com
punchout.scc.com
bs1.scc.com
store.scc.com
esharepoint.scc.com

Certificate

The complete raw certificate details for *.ras.sentinel.scc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktAPPkUJDe/mMcNf1vP4
tj8u116jcQ6q4ydKWGEGKtDa39lDRAORQ13PyWy45wGW7UNNMAgUefN7L9cnPFd/
qxPJyfRf9P0Wr3OAYNdT+WsOQ6E9S+sxS2rnjITAG290o/O2L+i2Lcxh6zwvAoJv
eEPfZkbLcqNpHrBiZR6BtaO/ubSL2z/Av7VT+A0Z0ALXk4hhZYLFF/ZxT57l9QNo
RJmm34FsZWrn39dbkwwb166Fg29Ww4/8QrcJbJTwtbF6ZIvj0OF4dWgNjMfjjNvI
AJzuS9LzNvtLj9623uw1HEN62Oj+d2RbWlq5YIuUupGs0aGnGLDRJjgP/top7EcE
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29138070809888824000947277868
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-27 11:39:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-28 11:39:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Midlands'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Birmingham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SPECIALIST COMPUTER CENTRES PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ras.sentinel.scc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18533390510025723501753903588445694386994618806933706398711651140006583994736417029029361734830666355238831233069129488940520429330793553641035627834059989633239332167311604614502696491957516063669957922136114259635265680918966350310861244305686440230334494494897943148057632808594281741809970108795479650858927873377647232656426968347005603222938440429063377724084275119748329240651317560252442532649938151873924497318644752471008590039513835327865734621443063114705515238647527173437523737801285314955830993663675999703917980957783126397739437476765858100815117354751102375984194129473084545334796609245486898414807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ras.sentinel.scc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras.sentinel.scc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3c3fab4ce6580a5ade6f14ab6a525b4d2291559
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000c2438096b2f0bc34aafff2814543a1bdfb3d245209defea27046bdd023450bdf1781a687a980d98f0dc912fa5ae3f362538835575b9a7afa5d4617adbb6a65c14bb181efde69c4f98ad915f2c5014552d173e2e55414042bfbb150f3123cd50a25717b8757fce5ad6078d699ed0d80cd1f127448ea1e45bfcdac11e0f1a3f7960b99bc29091ab47d78efae4e2248c6738e15500a0fe2889afe155a5d57c468e90904df0f4e165c24b5ce68b99897d41b8cde258d0fcc4cc6e5ffaf47b27f133f7831822fd791ef6f61642816916a66c7c143665dd0e7aa5f1bd378e2e8312d85e7157c94f5670ed4352cf7d15b13f6e2bf512805f258bfa0cd6b74206f60f39