Devhrpassport.dfid.gov.uk

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 01:cf:81:7e:7d:05:a3:d2:13:db:b1:79:2a:59:4c:a8 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=Devhrpassport.dfid.gov.uk

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:cf:81:7e:7d:05:a3:d2:13:db:b1:79:2a:59:4c:a8
Serial Number (int): 2406659897781417532550948190609296552
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 2d:00:5d:d8:6d:d3:a2:25:8b:f7:3d:3a:5a:f9:c6:cf:df:7c:00:7d
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 91:31:67:41:bf:c5:4f:15:88:16:ca:e0:c2:0b:74:71:cc:75:15:eb
Fingerprint (sha256): 61:0e:77:b3:31:dc:2a:37:cb:8e:6a:28:98:24:af:9c:ad:7d:ba:eb:64:0d:40:73:c7:7b:1a:26:bc:ed:35:1e

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate Devhrpassport.dfid.gov.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Devhrpassport.dfid.gov.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

Devhrpassport.dfid.gov.uk
www.Devhrpassport.dfid.gov.uk

Other certificates including the domain name dfid.gov.uk

(limited to 100 certificates)
www.gov.uk
dfidexchange.dfid.gov.uk
intouch6.dfid.gov.uk
dfid.gov.uk
intouch3.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker-int.dfid.gov.uk
www.gov.uk
skypeexternal.dfid.gov.uk
dfidexchange.dfid.gov.uk
projects.dfid.gov.uk
*.dfid.gov.uk
intouch.dfid.gov.uk
supplierportal.dfid.gov.uk
Skypeexternal.dfid.gov.uk
aipbeta.dfid.gov.uk
adfs.dfid.gov.uk
devtracker.dfid.gov.uk
HRPassport.dfid.gov.uk
www.dfid.gov.uk
devtracker.dfid.gov.uk
www.gov.uk
www.gov.uk
intouch.dfid.gov.uk
adfs3.dfid.gov.uk
*.vault.dfid.gov.uk
devtracker.dfid.gov.uk
intouch2.dfid.gov.uk
DFIDCmg.dfid.gov.uk
intouch5.dfid.gov.uk
projects.dfid.gov.uk
devtracker.dfid.gov.uk
intouch3.dfid.gov.uk
dfidexchange.dfid.gov.uk
intouch2.dfid.gov.uk
DFIDCmg.dfid.gov.uk
Devhrpassport.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker.dfid.gov.uk
Devhrpassport.dfid.gov.uk
insight.dfid.gov.uk
www.gov.uk
*.dfid.gov.uk
www.gov.uk
*.dfid.gov.uk
supplierportal.dfid.gov.uk
devtracker.dfid.gov.uk
adfs3.dfid.gov.uk
devtracker.dfid.gov.uk
vault.dfid.gov.uk
intouch6.dfid.gov.uk
adfs3.dfid.gov.uk
insight.dfid.gov.uk
dfidexchange.dfid.gov.uk
www.dfid.gov.uk
Access.dfid.gov.uk
Index.dfid.gov.uk
DfidCmg.Dfid.gov.uk
devtracker-ci.dfid.gov.uk
dfid.gov.uk
supplierportal.dfid.gov.uk
www.gov.uk
www.gov.uk
devtracker.dfid.gov.uk
*.dfid.gov.uk
skypeexternal.dfid.gov.uk
azpphrpassport.dfid.gov.uk
supplierportal.dfid.gov.uk
adfs.dfid.gov.uk
devtracker.dfid.gov.uk
*.dfid.gov.uk
www.gov.uk
azpphrpassport.dfid.gov.uk
dfidexchange.dfid.gov.uk
supplierportal.dfid.gov.uk
www.gov.uk
intouch5.dfid.gov.uk
cscuk.dfid.gov.uk
www.gov.uk
adfstoken.dfid.gov.uk
dfidexchange.dfid.gov.uk
www.dfid.gov.uk
Devhrpassport.dfid.gov.uk
*.dfid.gov.uk
vault.dfid.gov.uk
access.dfid.gov.uk
dfidexchange.dfid.gov.uk
devtracker.dfid.gov.uk
supplierportal.dfid.gov.uk
dfidexchange.dfid.gov.uk
dfidexchange.dfid.gov.uk
access.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker-int.dfid.gov.uk
www.gov.uk
Index.dfid.gov.uk
azpphrpassport.dfid.gov.uk
adfs.dfid.gov.uk
*.vault.dfid.gov.uk
devtracker-ci.dfid.gov.uk

Certificate

The complete raw certificate details for Devhrpassport.dfid.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2406659897781417532550948190609296552
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Devhrpassport.dfid.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 934211891781092841549049892381603089510716229956462761918682303292215884604897931071466121381963302693758921086874923720685125963233857586358249375476957194113154794075553648509332061287788446853162971428155008796677672100572498273363772001876445412022115751085606990873240055650983456923125005944554480260482083741069972674873075430507106428881198627794007451633376904949415380583202673300225254112473330543057884209650434408959980414550016358318238586787278983574381725085878898459814014874590906658936544348654471709114981627994520764677345983873520091434358223223508121879086319220041849689515576873043620898652078175734288903392963338844894526201749039589681682666002411701418830766285932072659993513055025717236494549569960981526582829192233616974324174227106472957837703335100977478547521496014939156624659512907288758023689523233130060833393582317720176443841131428490295043676977532920650135234142326252075072915703114366242311600091263332195671868659173058217098125082718558380044328182172491237647825126125503765649677793378068799037477333542201328772436572580695593074069414879718967717683274319154796683315366239129960016706079475970911414472984882035613958619691142517515609299898758913706833800593221472903839882776217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d005dd86dd3a2258bf73d3a5af9c6cfdf7c007d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Devhrpassport.dfid.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Devhrpassport.dfid.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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