insight.plumsteadmanor.com

- Plumstead Manor School -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 44:08:a4:ca:ca:bb:ee:2c:93:67:82:ce:d1:fe:84:e7 was issued on by GeoTrust Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Plumstead Manor School

Organization: Plumstead Manor School
Organization unit: IT
State / Province: London
Locality: London
Country: GB

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 44:08:a4:ca:ca:bb:ee:2c:93:67:82:ce:d1:fe:84:e7
Serial Number (int): 90432384470249550591513749142617621735
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): b2:d7:72:0b:1d:b4:13:02:e9:8a:ce:cf:a8:35:b4:b5:02:da:6a:5c
Fingerprint (sha256): 79:7b:26:55:96:aa:92:ed:20:96:a6:b1:5f:e9:d2:22:03:15:b5:83:69:c1:66:a1:c5:bf:fc:44:fd:41:b4:74

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate insight.plumsteadmanor.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for insight.plumsteadmanor.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pars.plumsteadmanor.com
cura.plumsteadmanor.com
insight.plumsteadmanor.com

Other certificates including the domain name plumsteadmanor.com

(limited to 100 certificates)
ithelpdesk.ttmgroup.ie
servicedesk.weareavidity.com
servicedesk.vretigas.it
ts.plumsteadmanor.com
insight.plumsteadmanor.com
helpdesk.sicom.mu
sdp.dilloneustace.ie
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
plumsteadmanor.com
sdpcloud.netwarx.com
ictportal.linkfinancial.eu
ithelp.mhphotels.com
ithelp.mhphotels.com
sdp.dilloneustace.ie
helpdesk.aerocompact.com
helpdesk.bedes.org
servicedesk.bat-agrar.de
plumsteadmanor.com
helpdeskittest.zetes.com
www.sixthform.plumsteadmanor.com
aiseait.fuchs.com
insight.plumsteadmanor.com
insight.plumsteadmanor.com
helpdesk.hambroperks.com
assist.pentest.partners
itservicedesk.eldoradogold.com
helpdesk.bedes.org
servicedesk.procentia.com
servicedesk.bellrockgroup.co.uk
helpdesk.vista.ch
servicedesk.jmlgroup.co.uk
assist.pentest.partners
ithelpdesk.ttmgroup.ie
assist.pentest.partners
plumsteadmanor.com
servicedesk.jmlgroup.co.uk
assist.pentest.partners
aiseait.fuchs.com
servicedesk.bwbconsulting.com
assist.pentest.partners
assist.pentest.partners
helpdesk.plumsteadmanor.com
helpdesk.actosoft.de
assist.pentest.partners
assist.pentest.partners
plumsteadmanor.com
helpdesk.actosoft.de
ithelpdesk.rev-log.com
sau.solarprofit.es
assist.pentest.partners
helpdeskittest.zetes.com
plumsteadmanor.com
servicedesk.bat-agrar.de
servicedesk.weareavidity.com
helpdesk.bedes.org
aiseait.fuchs.com
ithelp.mhphotels.com
aiseait.fuchs.com
helpdesk.coulisse.com
helpdesk.nationalcaregroup.com
servicedesk.procentia.com
helpdesk.wentworthclub.com
helpdesk.bedes.org
servicedesk.winfieldunited.co.za
helpdesk.saviaantjes.be
assist.pentest.partners
itservicedesk.eldoradogold.com
helpdesk.vista.ch
assist.pentest.partners
ts.plumsteadmanor.com
helpdesk.nationalcaregroup.com
sistemes.accio.gencat.cat
ictportal.linkfinancial.eu
helpdesk.minitab.com
insight.plumsteadmanor.com
ithelpdesk.rev-log.com
sistemes.accio.gencat.cat
sdp.vdp.com
ithelpdesk.rev-log.com
assist.pentest.partners
servicedesk.procentia.com
servicedesk.weareavidity.com
helpdesk.hambroperks.com
helpdesk.sicom.mu
helpdesk.nationalcaregroup.com
assist.pentest.partners
helpdesk.sicom.mu
ictportal.linkfinancial.eu
helpdeskittest.zetes.com
assist.pentest.partners
assist.pentest.partners
helpdesk.plumsteadmanor.com
assist.pentest.partners
servicedesk.jmlgroup.co.uk
ictportal.linkfinancial.eu
servicedesk.winfieldunited.co.za
ithelpdesk.archlynk.com
pomoc.wsuz.edu.pl
pomoc.wsuz.edu.pl

Certificate

The complete raw certificate details for insight.plumsteadmanor.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDMjotHVLCDbjFoBgnBS
5UDLmo6TmrJv3xFpbmNOEYEm+HjhiQNg646uWQbCa0TupsCgcrNNR6vN87vpZ2cS
ezhqNPz8dcg9OCfAVFZnuxcmmVZaEYeY6UuGeZzAYHvsFoMVYbtxeAvgHykLAetv
2JkaydarVRCEypEJK+Ey8fPjlmxlKXl/mYoX2VGGfMrhqBPXZWEaurqTP1GTMUq5
KDppH5Pagh3fcGDizpRt+xtFAUx6SWgnt/iMasv1glu8WnyV3y7ItsvhetlKKCK2
9lLUF/ZmL8AAiLyoMo9fpoCiYAKaKgMCUsNsupfHCvhkN7hD43wwHRr+R0DsC7iV
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 90432384470249550591513749142617621735
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Plumstead Manor School'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'insight.plumsteadmanor.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23253065794719095474619708863582134818916815980621239504016158194858021760981179673621933558352966011936836669812950041517057625514102497557885723921323646830496520427765744539350103920155285966578196661856992952150661816098732134765881937182576823358683798726380041961115576476862643267805665306688191509436179972470163332108754246018391553494828922429860387652461471687318619371132163222235316484810991018721453317127758862727934212082751927515669847838209284759281521691228680121380863961616037540514123883965932223844242341050791561433865026195862315530062935363652305813282024535733889706988608919811434718205207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pars.plumsteadmanor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cura.plumsteadmanor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight.plumsteadmanor.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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