order.api.live.abelandcole.co.uk

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 03:01:1f:9d:ba:8b:4c:42:4c:e2:19:ba:2c:ae:76:0f was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=order.api.live.abelandcole.co.uk

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:01:1f:9d:ba:8b:4c:42:4c:e2:19:ba:2c:ae:76:0f
Serial Number (int): 3993517535465123026198538203343779343
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ed:96:aa:1d:50:3f:17:ea:b6:b8:8a:c5:48:dd:73:16:2b:ed:f5:fa
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): ac:e5:72:0c:0c:f0:b6:5a:bc:e9:51:30:9c:92:14:59:b5:99:65:fc
Fingerprint (sha256): 7a:3b:87:8d:9c:c3:e2:8b:82:22:02:22:c6:50:93:6f:8b:62:47:a4:a5:c8:01:2c:6a:c1:38:53:6a:2e:93:8e

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate order.api.live.abelandcole.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for order.api.live.abelandcole.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

order.api.live.abelandcole.co.uk

Other certificates including the domain name abelandcole.co.uk

(limited to 100 certificates)
helpdesk.azdelta.be
webmail.abelandcole.co.uk
www.wardrombaut.xyz
incapsula.com
webmail.abelandcole.co.uk
webmail.abelandcole.co.uk
personalisation.api.test.abelandcole.co.uk
rds.abelandcole.co.uk
helpdesk.azdelta.be
fsus-3.freshservice.com
incapsula.com
incapsula.com
hmorders.afivn.com
incapsula.com
webmail.abelandcole.co.uk
incapsula.com
email.abelandcole.co.uk
bringhome.me
incapsula.com
incapsula.com
incapsula.com
www.dev.serviceprovider.woonig.app
incapsula.com
webmail.abelandcole.co.uk
testlinks.abelandcole.co.uk
test.abelandcole.co.uk
order.api.test.abelandcole.co.uk
*.abelandcole.co.uk
www.abelandcole.co.uk
neustartkultur.gema.de
order.api.dev.abelandcole.co.uk
order.api.live.abelandcole.co.uk
beta.metamoneybr.com.br
apigw.abelandcole.co.uk
www.abelandcole.co.uk
product.api.test.abelandcole.co.uk
incapsula.com
personalisation.api.dev.abelandcole.co.uk
product.api.dev.abelandcole.co.uk
personalisation.api.dev.abelandcole.co.uk
www.abelandcole.co.uk
www.abelandcole.co.uk
email.abelandcole.co.uk
incapsula.com
brainfood.abelandcole.co.uk
www.abelandcole.co.uk
alexlimadesign.com.br
email.abelandcole.co.uk
putuulay.com
incapsula.com
incapsula.com
helpdesk.azdelta.be
product.api.test.abelandcole.co.uk
webmail.abelandcole.co.uk
gineltonic.com
email.abelandcole.co.uk
incapsula.com
incapsula.com
order.api.dev.abelandcole.co.uk
blog.jexport.ci
helpdesk.azdelta.be
neustartkultur.gema.de
xnr.p.w3.app
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
helpdesk.azdelta.be
incapsula.com
www.abelandcole.co.uk
fsus-3.freshservice.com
product.api.dev.abelandcole.co.uk
linkdev.coachx.live
www.abelandcole.co.uk
email.abelandcole.co.uk
tetsu.rs
mozarty.app
apigw-test.abelandcole.co.uk
rds.abelandcole.co.uk
order.api.live.abelandcole.co.uk
www.abelandcole.co.uk
web.gigover.com
fsus-3.freshservice.com
email.abelandcole.co.uk
helpdesk.azdelta.be
incapsula.com
lms.edahampasala.com
devsecops.show
incapsula.com
share.stage.soniccloud.com
incapsula.com
*.abelandcole.co.uk
incapsula.com
minidate.link
helpdesk.azdelta.be
incapsula.com
incapsula.com
incapsula.com
www.abelandcole.co.uk

Certificate

The complete raw certificate details for order.api.live.abelandcole.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJwqE2sVX9xdi/mxrebD
N4lRkntcHtqC7+doERelUFcaEKjNPfo+45Ztg1j1oYibL2kQxT+h3Ipkj44B4qhI
Fky7w4OF0M/+V2nGEd4C/ecDA1iTqAjwwMIW0ZFaEw0WUssDHNZ4yfESWbGrTT1K
FzgQCpkTUURYLuucYGDKNHthYnSXsCwJbmEKBN6qBOz9CovZynZszRX7cRJOgGVJ
EP/3KRa7JDRN7QDonSMUQDaPVtgICyqtsnYPUvI8Np0VsF2tBEaPb26gX2E0KzFl
TDE7/SvqtN22i4BRJx26BLvp39emNjhfNVQgGBf1mF3+mSZ6tygM599UlffgOMPJ
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3993517535465123026198538203343779343
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'order.api.live.abelandcole.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23304855629188306858858276875632804594350001075683587893413534846264307881945191595427205045322871860541773396418088002361728508831722095039379854684132248843527328778190825668515920441106756587798906716331460220593656921078852040002039218469344092090468261470806097755495849438444192850977784671845160238406687951458846271663446913358029779968231888945879389294424133799043201421033861358266330150479814385821962341072584411751820753630005004736174114702740525618602199819932565570605231572756129904463440990757821121570798178335207442132198393830879021497380266232798003481612620323980376263803217983536506509445413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed96aa1d503f17eab6b88ac548dd73162bedf5fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.api.live.abelandcole.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016ec7c719ba000004030048304602210085c6961c44169b1db9540e4daa5706fe847e598168ccbd9d394a86cbb4413ec2022100fa2ab423aafbe406e6c79dabcb098c9641f0f2363a0312b3e5059449805ae0020076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ec7c719a50000040300473045022023899845b38299c4dc20cc3df53d7efb5cc75c98faa0abdee207c9037e26622b022100a50d06fb4c755cfb319a8d3bc560f299a93529a97988547dd8440a4e4ebac38c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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