standard.cips.org

- The Chartered Institute of Procurement and Supply -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 42:7f:1d:58:51:46:cf:92:e4:db:4a:6d:c5:75:a3:1d was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

The Chartered Institute of Procurement and Supply

Company registration number: Government Entity
Organization: The Chartered Institute of Procurement and Supply
State / Province: Lincolnshire
Locality: Stamford
Country: GB

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 42:7f:1d:58:51:46:cf:92:e4:db:4a:6d:c5:75:a3:1d
Serial Number (int): 88389064609949068716658061397431001885
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): a4:f8:83:d2:af:4a:e1:09:28:b4:37:59:2c:da:f4:de:c0:53:71:76
Fingerprint (sha256): 53:f7:2a:76:1a:f8:31:a3:0d:a7:90:1b:f9:e1:ae:8a:47:7e:b8:29:6b:ea:ba:aa:bf:71:f4:0f:d8:70:56:e9

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate standard.cips.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for standard.cips.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

standard.cips.org

Other certificates including the domain name cips.org

(limited to 100 certificates)
accreditation.lumanity.com
achievements.launchyou.com
achievements.launchyou.com
remote.cips.org
accreditation.lumanity.com
achievements.launchyou.com
accreditation.lumanity.com
accreditation.lumanity.com
accreditation.lumanity.com
standard.cips.org
adnoncentaur4.abasoft.co.uk
adnoncentaur4-5.abasoft.co.uk
adnoncentaur4.abasoft.co.uk
apolloproduction.cips.org
standard.cips.org
accreditation.lumanity.com
accreditation.lumanity.com
achievements.launchyou.com
adnoncentaur4-5.abasoft.co.uk
study.cips.org
accreditation.lumanity.com
achievements.launchyou.com
accreditation.lumanity.com
study.cips.org
study.cips.org
achievements.launchyou.com
accreditation.lumanity.com
accreditation.lumanity.com
accreditation.lumanity.com
accreditation.lumanity.com
adnoncentaur4.abasoft.co.uk
achievements.launchyou.com
achievements.launchyou.com
globalstandard.cips.org
accreditation.lumanity.com
accreditation.lumanity.com
standard.cips.org
accreditation.lumanity.com
accreditation.lumanity.com
accreditation.lumanity.com
achievements.launchyou.com
accreditation.lumanity.com
accreditation.lumanity.com
*.cips.org
mobilevpn.cips.org
accreditation.lumanity.com
accreditation.lumanity.com
assessorgateway.cips.org
standard.cips.org
achievements.launchyou.com
accreditation.lumanity.com
accreditation.lumanity.com
accreditation.lumanity.com
adnoncentaur4-5.abasoft.co.uk
study.cips.org
adnoncentaur4-5.abasoft.co.uk
apollouat.cips.org
standard.cips.org
standard.cips.org
standard.cips.org
accreditation.lumanity.com
accreditation.lumanity.com
accreditation.lumanity.com
remote.cips.org
dns1.wavecast.io
standard.cips.org
www.cips.org
adnoncentaur5.abasoft.co.uk
cips.org
www.cips.org
accreditation.lumanity.com
accreditation.lumanity.com
adnoncentaur4-5.abasoft.co.uk
cipsintelligence.cips.org
study.cips.org
accreditation.lumanity.com
accreditation.lumanity.com
accreditation.lumanity.com
achievements.launchyou.com
accreditation.lumanity.com
standard.cips.org
accreditation.lumanity.com
accreditation.lumanity.com
adnoncentaur4-5.abasoft.co.uk
accreditation.lumanity.com
accreditation.lumanity.com
standard.cips.org
accreditation.lumanity.com
study.cips.org
adnoncentaur4-5.abasoft.co.uk
study.cips.org
adnoncentaur4-5.abasoft.co.uk
adnoncentaur5.abasoft.co.uk
accreditation.lumanity.com
adnoncentaur4-5.abasoft.co.uk
standard.cips.org
accreditation.lumanity.com
www.cips.org
mymail.cips.org
gateway.cips.org

Certificate

The complete raw certificate details for standard.cips.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WH/ZH7Qs0yjMu2ZM2jb
czFv9tTJNZYi7JMKWwinZ3o1vsmi1+ebGTntKtCyyIFkAU9MIOgjRex0q9YtN9SI
U1DrjB1nCkuhuCHIVlT243uyXatiTwNbt3HgYrmuQmZEkniq3tGfTGZbYYa1ap/P
By5aQCYqFhg+UwssFJNQppS0nIExnN8xixwfIW48wN4cd6OjGVZNx49DevdjlNkP
lpCgu5po8CozGjj1vN5cQP5d7LLKXyeH7jfj1OOf7aRh4/E2rbKtqXZxYFrWIoEy
sESdtA1GCaGtaAUmq4aqjB7jTXjnGEotzgdF6CxIpR3iL/U1sM9UwlQ82QGoQAhu
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 88389064609949068716658061397431001885
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lincolnshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stamford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'The Chartered Institute of Procurement and Supply'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'standard.cips.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29461849488134115578030280838482637544296424508515141935863249310009811753056819750290019681974417344718704380301733319177330528296725291009903449388011016474159748430697728014064529920821189389925463134607926153261289456389582233390352102294685823052115135282544142533876633891291998527762253501958919672477767211425658954006885058954966067145342712168127261607611701927045858281810562654066596235574070626480680811019291909644588570518977296386626858884215573332374348078911247776018641228192131198265984492041818141376674339210472160707449059388798607336346912263006553243528574605536741527591944688961614177136159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standard.cips.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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