*.akcentral.com

- ABERCROMBIE & KENT LIMITED -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0e:8d:da:c1:da:d6:72:9a:47:4d:20:1f:7e:85:48:06 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ABERCROMBIE & KENT LIMITED

Organization: ABERCROMBIE & KENT LIMITED
State / Province: Gloucestershire
Locality: Cheltenham
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:8d:da:c1:da:d6:72:9a:47:4d:20:1f:7e:85:48:06
Serial Number (int): 19345742722098177695611863066860668934
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e6:82:3b:15:a3:36:6e:39:25:71:54:e6:ee:9b:b5:17:15:1c:ba:53
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 0e:9b:f6:58:c7:13:13:5b:44:1d:a6:ca:7d:58:cd:cc:fa:ec:79:6c
Fingerprint (sha256): 61:bc:a8:19:16:c6:61:3b:39:7e:55:62:ce:3f:ae:5e:0c:bc:75:e9:68:fa:7d:39:ee:6c:59:f9:d5:29:04:f9

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.akcentral.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.akcentral.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.akcentral.com
akcentral.com

Other certificates including the domain name akcentral.com

(limited to 100 certificates)
ithelpdesk.ttmgroup.ie
servicedesk.weareavidity.com
servicedesk.vretigas.it
helpdesk.sicom.mu
sdp.dilloneustace.ie
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
sdpcloud.netwarx.com
ithelp.visionrt.com
ictportal.linkfinancial.eu
servicedesk.hermesairports.com
ithelp.mhphotels.com
ithelp.mhphotels.com
lync.akcentral.com
sdp.dilloneustace.ie
helpdesk.aerocompact.com
helpdesk.kleen-tex.eu
itdesk.mkspamp.com
support.erm.com
it.littlegarth.org
helpdesk.kleen-tex.eu
helpdesk.bedes.org
servicedesk.bat-agrar.de
helpdeskittest.zetes.com
aiseait.fuchs.com
support.erm.com
servicedesk.danbred.com
ithelpdesk.farnboroughairport.com
*.akcentral.com
helpdesk.hambroperks.com
ithelp.visionrt.com
assist.pentest.partners
itservicedesk.eldoradogold.com
helpdesk.bedes.org
servicedesk.procentia.com
servicedesk.bellrockgroup.co.uk
helpdesk.vista.ch
servicedesk.jmlgroup.co.uk
helpdesk.troax.com
assist.pentest.partners
ithelpdesk.ttmgroup.ie
assist.pentest.partners
servicedesk.jmlgroup.co.uk
assist.pentest.partners
aiseait.fuchs.com
servicedesk.bwbconsulting.com
ithelpdesk.farnboroughairport.com
mail.akcentral.com
soporte.llorenteycuenca.com
noc.servicedesk.as
servicedesk.akcentral.com
assist.pentest.partners
assist.pentest.partners
servicedesk.medica.ie
ithelpdesk.farnboroughairport.com
helpdesk.plumsteadmanor.com
helpdesk.actosoft.de
assist.pentest.partners
assist.pentest.partners
assist.pentest.partners
helpdesk.actosoft.de
ithelpdesk.rev-log.com
sau.solarprofit.es
assist.pentest.partners
helpdeskittest.zetes.com
support.erm.com
servicedesk.bat-agrar.de
servicedesk.weareavidity.com
mail.akcentral.com
*.akcentral.com
helpdesk.bedes.org
mail.akcentral.com
aiseait.fuchs.com
mail.akcentral.com
servicedesk.hermesairports.com
ithelp.mhphotels.com
aiseait.fuchs.com
helpdesk.coulisse.com
helpdesk.nationalcaregroup.com
servicedesk.hermesairports.com
servicedesk.procentia.com
*.akcentral.com
helpdesk.wentworthclub.com
helpdesk.bedes.org
servicedesk.winfieldunited.co.za
helpdesk.saviaantjes.be
ithelpdesk.farnboroughairport.com
assist.pentest.partners
itservicedesk.eldoradogold.com
helpdesk.fast.eu
helpdesk.kleen-tex.eu
helpdesk.vista.ch
it.littlegarth.org
assist.pentest.partners
ithelpdesk.farnboroughairport.com
it.littlegarth.org
helpdesk.nationalcaregroup.com
sistemes.accio.gencat.cat
*.akcentral.com
ictportal.linkfinancial.eu

Certificate

The complete raw certificate details for *.akcentral.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorxtZSBMMyHAgSpWXnzH
Un30w7IPLedePfP22mMytfInQ30o/KZ0P9nAPgwREHow0ZnG4PqFdKG+c7H1c8Qi
UxTxpfWEMs5+0yDL0BUYJv5/5k/JXLo69gSp6Oze4KtyZTQ2QiN/FQ0KL5VY+LBK
kwp9mO6dGS92tG7ehMwZH3wEqDu/WB/Ci+zMTt8h0OLPWrUCaYLjf62KjFlwmViZ
sFzbxHjYgf1MTcHdKD01kw1dVZVBlZ89tiobpYEh3REotaIx3bX2lTg5NWPuDMjS
50bxmAqYdYFeGc3fGxCO/Pjm6b2Pm5DhaVfbVSdlkRUvSmZEncuRns/SxRm8crPp
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19345742722098177695611863066860668934
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gloucestershire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cheltenham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ABERCROMBIE & KENT LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.akcentral.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20543522381183277503782684819317731735253476676979007859152176872430903328048235615224424120217422046266379258074163158253049877400694592372723070684188867471594175545425598292366080054076683329593069130638367018062615008036295722254549209088992855148258472313183920726595425582331828845634760523202262016924899289943097213605073076346635837287115415066152832524419910677650621188529280439610081626354443846498684226416430043409231779713740160537419607921216298619058515791852858790639430144097144902071367866128714374188776913789119458987101775606313166173120673713863128617790716075132412787731484905906386041563491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6823b15a3366e39257154e6ee9bb517151cba53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akcentral.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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