DFIDCmg.dfid.gov.uk

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 05:85:c5:69:60:7d:9f:77:bb:14:20:22:75:0d:03:70 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=DFIDCmg.dfid.gov.uk

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:85:c5:69:60:7d:9f:77:bb:14:20:22:75:0d:03:70
Serial Number (int): 7340719444621124551157267450240500592
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 99:3c:20:bf:26:93:90:47:a1:db:a5:d9:65:72:4a:be:27:99:96:52
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): d5:49:b2:a2:a4:82:29:be:38:a9:98:4b:2c:1d:cb:b9:5c:f1:f0:b4
Fingerprint (sha256): 52:c2:ec:66:c5:57:17:df:d4:ad:8a:76:1d:62:66:3d:b0:3f:a1:7c:9b:45:9a:f6:41:1e:11:e2:8f:8e:d9:b7

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate DFIDCmg.dfid.gov.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for DFIDCmg.dfid.gov.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

DFIDCmg.dfid.gov.uk
www.DFIDCmg.dfid.gov.uk

Other certificates including the domain name dfid.gov.uk

(limited to 100 certificates)
www.gov.uk
dfidexchange.dfid.gov.uk
intouch6.dfid.gov.uk
dfid.gov.uk
intouch3.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker-int.dfid.gov.uk
www.gov.uk
skypeexternal.dfid.gov.uk
dfidexchange.dfid.gov.uk
projects.dfid.gov.uk
*.dfid.gov.uk
intouch.dfid.gov.uk
supplierportal.dfid.gov.uk
Skypeexternal.dfid.gov.uk
aipbeta.dfid.gov.uk
adfs.dfid.gov.uk
devtracker.dfid.gov.uk
HRPassport.dfid.gov.uk
www.dfid.gov.uk
devtracker.dfid.gov.uk
www.gov.uk
www.gov.uk
intouch.dfid.gov.uk
adfs3.dfid.gov.uk
*.vault.dfid.gov.uk
devtracker.dfid.gov.uk
intouch2.dfid.gov.uk
DFIDCmg.dfid.gov.uk
intouch5.dfid.gov.uk
projects.dfid.gov.uk
devtracker.dfid.gov.uk
intouch3.dfid.gov.uk
dfidexchange.dfid.gov.uk
intouch2.dfid.gov.uk
DFIDCmg.dfid.gov.uk
Devhrpassport.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker.dfid.gov.uk
Devhrpassport.dfid.gov.uk
insight.dfid.gov.uk
www.gov.uk
*.dfid.gov.uk
www.gov.uk
*.dfid.gov.uk
supplierportal.dfid.gov.uk
devtracker.dfid.gov.uk
adfs3.dfid.gov.uk
devtracker.dfid.gov.uk
vault.dfid.gov.uk
intouch6.dfid.gov.uk
adfs3.dfid.gov.uk
insight.dfid.gov.uk
dfidexchange.dfid.gov.uk
www.dfid.gov.uk
Access.dfid.gov.uk
Index.dfid.gov.uk
DfidCmg.Dfid.gov.uk
devtracker-ci.dfid.gov.uk
dfid.gov.uk
supplierportal.dfid.gov.uk
www.gov.uk
www.gov.uk
devtracker.dfid.gov.uk
*.dfid.gov.uk
skypeexternal.dfid.gov.uk
azpphrpassport.dfid.gov.uk
supplierportal.dfid.gov.uk
adfs.dfid.gov.uk
devtracker.dfid.gov.uk
*.dfid.gov.uk
www.gov.uk
azpphrpassport.dfid.gov.uk
dfidexchange.dfid.gov.uk
supplierportal.dfid.gov.uk
www.gov.uk
intouch5.dfid.gov.uk
cscuk.dfid.gov.uk
www.gov.uk
adfstoken.dfid.gov.uk
dfidexchange.dfid.gov.uk
www.dfid.gov.uk
Devhrpassport.dfid.gov.uk
*.dfid.gov.uk
vault.dfid.gov.uk
access.dfid.gov.uk
dfidexchange.dfid.gov.uk
devtracker.dfid.gov.uk
supplierportal.dfid.gov.uk
dfidexchange.dfid.gov.uk
dfidexchange.dfid.gov.uk
access.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker-int.dfid.gov.uk
www.gov.uk
Index.dfid.gov.uk
azpphrpassport.dfid.gov.uk
adfs.dfid.gov.uk
*.vault.dfid.gov.uk
devtracker-ci.dfid.gov.uk

Certificate

The complete raw certificate details for DFIDCmg.dfid.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7340719444621124551157267450240500592
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DFIDCmg.dfid.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 636977037281798010373132317905080367129672457154974121304940005939770691603172905424635397248447929799815454902978690570800772214394287381492299823530982292069847358682469816934329571884349003898466968683564735508905712967368207346169197724575271130349862419773489920708360262437162107003652764611125170801792751678621592119411117826898183300628636645079690818226763751543746818892494489719668321050063012656310221150440606524756893100467595238125966431742365547200121671243611831346884958769960987553295995633958083074351140984063353764910917019819412868519648917924316767231205039768251139947127524668215382196620713312385604853363585739709341023552621241660757131806786454960390727977704473855441658561211562066043650806265062321242409415635037254860724702965784646028416270482841802623838125722734658799811442931720198319361489445428706686460048609711872450234398275133922134859796529300133657637900251739540632357068090617656840277954105413066611734674834028134860122888294532701942551672216578002612061850173396914634813416042055971464562895528530246037882291799437360851060290556024615160661740801231041381243625239427045525875068641660738345945838080452891290209148052996592190821037309403327155428987508108384416710741290981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							993c20bf26939047a1dba5d965724abe27999652
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DFIDCmg.dfid.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.DFIDCmg.dfid.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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