medicine-seller-register.mhra.gov.uk

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0f:02:bf:6e:03:87:e7:f3:45:db:54:aa:22:71:ae:fd was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=medicine-seller-register.mhra.gov.uk

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:02:bf:6e:03:87:e7:f3:45:db:54:aa:22:71:ae:fd
Serial Number (int): 19952687186915737156304349154134568701
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 36:e6:7f:23:ba:28:88:4a:4e:9f:83:d5:98:85:2a:e5:46:cb:0c:b6
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): a0:68:1d:e5:c9:29:6d:7e:3e:2e:f4:45:96:2a:46:6c:5f:a9:de:5d
Fingerprint (sha256): 4b:b8:14:0c:45:4a:f0:0a:92:5b:da:e1:9c:40:30:86:86:43:48:e8:7e:30:ef:36:99:25:47:e0:2e:e8:f7:c6

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate medicine-seller-register.mhra.gov.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for medicine-seller-register.mhra.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

medicine-seller-register.mhra.gov.uk

Other certificates including the domain name mhra.gov.uk

(limited to 100 certificates)
ehr-management.mhra.gov.uk
mail.mhra.gov.uk
*.dev.mhra.gov.uk
remote.mhra.gov.uk
cms.mhra.gov.uk
STS.MHRA.GOV.UK
ehr-services.mhra.gov.uk
ehr-services.mhra.gov.uk
externalappstest.mhra.gov.uk
vendor.mhra.gov.uk
mft.mhra.gov.uk
remote-rds.mhra.gov.uk
medicines.api.mhra.gov.uk
vpn.mhra.gov.uk
sts.mhra.gov.uk
mail.mhra.gov.uk
STS.MHRA.GOV.UK
esusar.mhra.gov.uk
*.mhra.gov.uk
mail.mhra.gov.uk
sts.ad.mhra.gov.uk
subscriptions.mhra.gov.uk
mail.mhra.gov.uk
www.cas.mhra.gov.uk
*.test.mhra.gov.uk
ideas.mhra.gov.uk
ehr-management.mhra.gov.uk
yellowcard.mhra.gov.uk
mft.mhra.gov.uk
aic.mhra.gov.uk
sts.staging.mhra.gov.uk
sentinel-pclportal.mhra.gov.uk
yellowcard.mhra.gov.uk
info.mhra.gov.uk
www.cas.mhra.gov.uk
esusar.mhra.gov.uk
yellowcard.mhra.gov.uk
vendor.mhra.gov.uk
esusar.mhra.gov.uk
dm.mhra.gov.uk
mail.mhra.gov.uk
ehr-management.mhra.gov.uk
products.mhra.gov.uk
cpd.mhra.gov.uk
*.test.mhra.gov.uk
sts.staging.mhra.gov.uk
pclportal.mhra.gov.uk
ehr-services.mhra.gov.uk
mail.mhra.gov.uk
www.mhra.gov.uk
esusar.mhra.gov.uk
services.mhra.gov.uk
icsrsubmissions.mhra.gov.uk
subscriptions.mhra.gov.uk
services.mhra.gov.uk
aic.mhra.gov.uk
remote.mhra.gov.uk
yellowcard.mhra.gov.uk
medicines-api.non-prod.mhra.gov.uk
medicine-seller-register.mhra.gov.uk
webradr-halmed.redant.cloud
ehr-services.mhra.gov.uk
mft-test.mhra.gov.uk
mft.mhra.gov.uk
mail.mhra.gov.uk
info.mhra.gov.uk
mail.mhra.gov.uk
products.mhra.gov.uk
sip.mhra.gov.uk
subscriptions.mhra.gov.uk
itsr-ideas.mhra.gov.uk
cms.mhra.gov.uk
aic.mhra.gov.uk
www.cas.mhra.gov.uk
mft-test.mhra.gov.uk
medicine-seller-register.mhra.gov.uk
aic.mhra.gov.uk
subscriptions.mhra.gov.uk
coronavirus-yellowcard.mhra.gov.uk
yellowcard.mhra.gov.uk
cms.mhra.gov.uk
yellowcard.mhra.gov.uk
sip.mhra.gov.uk
mte.mhra.gov.uk
swineflu.mhra.gov.uk
cms.mhra.gov.uk
medicine-seller-register.mhra.gov.uk
ehr-management.mhra.gov.uk
ehr-services.mhra.gov.uk
services.mhra.gov.uk
dm.mhra.gov.uk
subscriptions.mhra.gov.uk
aic.mhra.gov.uk
medicine-seller-register.mhra.gov.uk
pandemicflu.mhra.gov.uk
icsrsubmissions.mhra.gov.uk
*.test.mhra.gov.uk
vendor.mhra.gov.uk
pclportal.mhra.gov.uk
mft.mhra.gov.uk

Certificate

The complete raw certificate details for medicine-seller-register.mhra.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq61Wo/Au2oKF1WlWaSYg
AVDENlLTXpRTdNPWIKuNR7klMJ9dJ6rpzeaUrOkZyPUDnfMXJ1twJS+TM+/j9Y4B
mg2vsurzbHTAvrC/mKdM/+cYkZmT1Ls8uvcIPBYZVfNzASRnj74mT6ygskcb7Yag
s96NJY6JXgr5RhdAPbejs/O7VMMKyb0IrMX2ELThPp5D/RXk29zRsqVIbEcM9XUB
SClxDF6IZwx0e3+SF7pOtDSWfW9q4ypiq+gSQ/nkiZ25/EwRfT/DvcQQ9g4zASuU
S2OTm3KCWx5tIWczfCg2bpWxoXMgP4V5HDk4m8/ry7VQiVhEo2+LrWDyGKY6dWm0
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19952687186915737156304349154134568701
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'medicine-seller-register.mhra.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21672226519214192283493336253156601145927947465851209571161272605233115369751838098691904115889181696238329879796120870893414626055418727554314315112752517912662309076567173662209028235502247682858403372062312386351241702244836914897064885005446793263850987264734161388256986124290660954873161492006494795405288830613338349809005185840217632544684628250945882565839063863215620280026176336484136388583368927508974570984325603546071456417542625217009314116370654186885740455740538251766797376280573606488524884159576673200470276885426529093388064637137568965464721271189053624778310399292046996514664495364452083414161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							36e67f23ba28884a4e9f83d598852ae546cb0cb6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicine-seller-register.mhra.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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