*.skillguard.co.uk

Issued by Gandi RSA Domain Validation Secure Server CA 3

About this certificate

This digital certificate with serial number 3c:e3:88:ac:9d:46:a9:24:fc:e7:2b:46:84:dd:83:09 was issued on by Gandi.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.skillguard.co.uk

Gandi

Organization: Gandi
Country: FR

This certificate will expire on

Certificate Details

Serial Number (hex): 3c:e3:88:ac:9d:46:a9:24:fc:e7:2b:46:84:dd:83:09
Serial Number (int): 80935103217606977438114742653947839241
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: bb:e0:6f:f0:64:06:f6:02:d2:8d:80:1d:6f:90:b4:12:72:46:52:99
AuthorityKeyId: 81:11:92:de:66:32:a5:b0:5b:33:3d:65:43:85:fc:d4:04:2d:f1:ae

Fingerprint (sha1): be:21:8a:8d:0f:d9:79:8c:ab:11:e7:f5:ff:99:ce:5c:a1:95:b4:e0
Fingerprint (sha256): 63:7a:df:3b:9d:a0:95:98:07:8f:ea:d6:11:59:86:db:af:5e:9d:58:88:04:97:a6:f9:a4:cd:a1:64:7c:0c:62

Issuing Certificate URL: http://crt.sectigo.com/GandiRSADomainValidationSecureServerCA3.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.skillguard.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.skillguard.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.skillguard.co.uk
skillguard.co.uk

Other certificates including the domain name skillguard.co.uk

(limited to 100 certificates)
assistenza.rrdl.it
support.algotech.vision
assistenza.rrdl.it
assistenza.rrdl.it
support-utilities.skillguard.co.uk
help.evonext.it
support-utilities.skillguard.co.uk
asistenciaalumno.imf.com
assistenza.rrdl.it
ayuda.auladade.com
desk.neo-kanzlei.de
assistenza.rrdl.it
support.hypeboost.com
support.truviewgps.com
*.skillguard.co.uk
desk.velptec.de
asistenciaalumno.imf.com
assistenza.rrdl.it
hub.millbankcreative.com
support.ntwrkpeople.nl
support.slttours.co.uk
helpcentrum.sensoa.be
assistenza.rrdl.it
support.ntwrkpeople.nl
desk.velptec.de
support.cosmocart.shop
assistenza.rrdl.it
hub.millbankcreative.com
hub.millbankcreative.com
assistenza.rrdl.it
assistenza.rrdl.it
support.algotech.vision
kundendienst.snkb.de
support.ntwrkpeople.nl
desk.velptec.de
help.richard-designs.com
assistenza.rrdl.it
assistenza.rrdl.it
support.algotech.vision
assistenza.rrdl.it
assistenza.rrdl.it
assistenza.rrdl.it
help.acctopus.com
*.skillguard.co.uk
assistenza.rrdl.it
support-utilities.skillguard.co.uk
*.skillguard.co.uk
community.chuzeat.com
assistenza.rrdl.it
kundendienst.snkb.de
assistenza.rrdl.it
assistenza.rrdl.it
support.ntwrkpeople.nl
assistenza.rrdl.it
helpcentrum.sensoa.be
ayuda.auladade.com
assistenza.rrdl.it
assistenza.rrdl.it
helpcentrum.sensoa.be
helpdesk.tmradio.online
support.hypeboost.com
desk.velptec.de
help.evonext.it
support.algotech.vision
assistenza.rrdl.it
support.slttours.co.uk
support.cosmocart.shop
assistenza.rrdl.it
assistenza.rrdl.it
asistenciaalumno.imf.com
asistenciaalumno.imf.com
help.acctopus.com
helpcentrum.sensoa.be
assistenza.rrdl.it
help.richard-designs.com
ayuda.auladade.com
hub.millbankcreative.com
assistenza.rrdl.it
assistenza.rrdl.it
asistenciaalumno.imf.com
help.evonext.it
support.hypeboost.com
support.cosmocart.shop
assistenza.rrdl.it
assistenza.rrdl.it
assistenza.rrdl.it
help.evonext.it
support.cosmocart.shop
*.skillguard.co.uk
helpdesk.tmradio.online
support.hypeboost.com
community.chuzeat.com
ayuda.auladade.com
help.richard-designs.com
assistenza.rrdl.it
desk.neo-kanzlei.de
asistenciaalumno.imf.com
support.slttours.co.uk
deild2.svar.cloud
assistenza.rrdl.it

Certificate

The complete raw certificate details for *.skillguard.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/iUMtC2+1zuMaQKsox7
6AOFcPjK6CULllygw81VK+/Z1RwwqVvMUe6WJ2D+5TiPRD4/41QFCaC63h58uaU5
ggJMwBS2xJqJ37jLt2c9wxrSV6dOlviXetIMetR0fDrD+yBEmDnm1eAkHb69ZvCe
69pSl6LIQFRWnm2CHuSRarnMqRSXXdQ+Oi2NaYi33iIy1mcKYJcE6uLWygV/zmFP
71Gprk9lIenQjsHaBzVmMs5grs3lYnUmvj5IOAHwrD326SHfhjG2qzyCy+50+e9z
gO3gZrfREXn6ZeZdd66DTnoCgFthNXnMMRZDF2Vzr827A+fwjPOdjT3JgZm7vq1g
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 80935103217606977438114742653947839241
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi RSA Domain Validation Secure Server CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.skillguard.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27263814392055242869724146891469799963336803745435350306315883686896372107267968290450591519727672099501214983126468821485383674181309440590713370105623962691300640522185780217921249839816985446390253506184848374409668882691884086389457928550513510270045877717225516745521121698633311896211471182209886768383231641164425186786314368529040959381597335137520498777177266565147413082615214806137581832062006522029073110742597743979551980684585164287002119154421526426385081995830399525994814668548005195307812850735811323841336983205485842440511804070603207671887893385184475434534704390075060118782354276398758682779893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 811192de6632a5b05b333d654385fcd4042df1ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbe06ff06406f602d28d801d6f90b41272465299
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/GandiRSADomainValidationSecureServerCA3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skillguard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skillguard.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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