*.afblakemore.com

- A.F.BLAKEMORE AND SON LIMITED -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0e:36:b2:91:c3:cb:e9:4e:3d:33:fc:1c:b0:b2:c7:93 was issued on by DigiCert Inc.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

A.F.BLAKEMORE AND SON LIMITED

Organization: A.F.BLAKEMORE AND SON LIMITED
Locality: Willenhall
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:36:b2:91:c3:cb:e9:4e:3d:33:fc:1c:b0:b2:c7:93
Serial Number (int): 18893197788938808089449109481061533587
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5a:45:f7:b2:ba:28:85:4a:cc:9d:ac:96:c8:71:8c:35:66:f7:84:16
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 04:f4:f9:f8:42:e1:29:0f:43:95:17:1e:c4:a9:42:4c:f6:e1:fa:cf
Fingerprint (sha256): 4b:f1:43:ab:77:e2:11:03:84:04:a6:df:dc:23:46:61:c4:f5:06:da:4a:0a:bf:19:ba:63:5d:54:ac:e8:de:e9

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate *.afblakemore.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.afblakemore.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.afblakemore.com
mercury.afblakemore.com
mercuryv1.afblakemore.com
mercuryv2.afblakemore.com
mercuryv3.afblakemore.com
mailfilter1.afblakemore.com
mercuryv4.afblakemore.com
mercury1.afblakemore.com
mercury3.afblakemore.com
afblakemore.com

Other certificates including the domain name afblakemore.com

(limited to 100 certificates)
*.afblakemore.com
*.afblakemore.com
*.afblakemore.com
ithelp.mjevansgroup.co.uk
*.afblakemore.com
*.afblakemore.com
*.afblakemore.com
*.afblakemore.com
*.afblakemore.com
bastion1.afblakemore.com
*.afblakemore.com
*.afblakemore.com
msx.afblakemore.com
*.afblakemore.com
*.afblakemore.com
*.afblakemore.com
academy.afblakemore.com
bastion1.afblakemore.com
*.afblakemore.com
*.afblakemore.com
*.afblakemore.com
msx.afblakemore.com
servicedesk.aquinos.net
msx.afblakemore.com
it-servicedesk.afblakemore.com
*.afblakemore.com
*.afblakemore.com
*.afblakemore.com
*.afblakemore.com
*.afblakemore.com
*.afblakemore.com
*.afblakemore.com
*.afblakemore.com
*.afblakemore.com
*.afblakemore.com
*.afblakemore.com
*.afblakemore.com
*.afblakemore.com
*.afblakemore.com
*.afblakemore.com
servicedesk.borer.ch
*.afblakemore.com
*.afblakemore.com

Certificate

The complete raw certificate details for *.afblakemore.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18893197788938808089449109481061533587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Willenhall'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'A.F.BLAKEMORE AND SON LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.afblakemore.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 722152194748924132648214549576930001365893744124094750185754003776460202222715337123935255254230418948452261047116702822358804757622567632841431167444104635358655098533525615664917569653313669346772190280319804957987445207520202453676839355777683643382772802741746530939145867259670502760953946053027472476140042065288424430033933226703376396270060921749542217941180970652867816201634134650799908259842816948279208141587337649078945780503840116168263040332473059832499040468850881313835416752907510583554403990826841524543250725491863788003538354100927505255166296930165017264803888346357172605594212196000026628881586114992093251001791176531404120416510992029442056339447056992693234418772313429983869450682362499025366077916198633793639035889543212166127374909849248652212720314971717664176003769592480270286565780487940934905773384648595405199455732246967965719400938768977955194030128865294276114698370247434550327818736741036808843276627486249146079115246249851371120697051300909254651946823280045458050838195123505364999612799856246888222156722929570107961720285909130178942709745667972721002116762794425551458562015152146844063325166685515952113982564871041558635687145034975502827258267120733255643867477514657603699803095659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a45f7b2ba28854acc9dac96c8718c3566f78416
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (253 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afblakemore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercury.afblakemore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercuryv1.afblakemore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercuryv2.afblakemore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercuryv3.afblakemore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailfilter1.afblakemore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercuryv4.afblakemore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercury1.afblakemore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercury3.afblakemore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afblakemore.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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