Index.dfid.gov.uk

Issued by GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1

About this certificate

This digital certificate with serial number 0d:bb:08:62:c5:61:9c:5e:56:d2:40:48:1d:e0:8d:71 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=Index.dfid.gov.uk

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:bb:08:62:c5:61:9c:5e:56:d2:40:48:1d:e0:8d:71
Serial Number (int): 18251093542473225894282172015459732849
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ac:00:97:7b:fa:3f:f9:39:23:83:24:1b:8c:0e:12:0b:1c:0b:08:cf
AuthorityKeyId: 12:c9:88:9b:2f:c9:44:7a:7d:12:f1:df:40:03:42:98:92:c7:24:d6

Fingerprint (sha1): 6c:2b:b0:e9:99:59:c7:f5:11:26:17:63:61:32:9f:30:40:1f:57:d6
Fingerprint (sha256): 80:91:18:4c:a4:fc:8d:2b:ad:0f:fa:be:b2:2d:18:90:c5:64:83:ec:85:e4:3d:f2:41:da:a5:25:ef:88:24:2b

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crl

Check the revocation status for certificate Index.dfid.gov.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Index.dfid.gov.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

Index.dfid.gov.uk

Other certificates including the domain name dfid.gov.uk

(limited to 100 certificates)
www.gov.uk
dfidexchange.dfid.gov.uk
intouch6.dfid.gov.uk
dfid.gov.uk
intouch3.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker-int.dfid.gov.uk
www.gov.uk
skypeexternal.dfid.gov.uk
dfidexchange.dfid.gov.uk
projects.dfid.gov.uk
*.dfid.gov.uk
intouch.dfid.gov.uk
supplierportal.dfid.gov.uk
Skypeexternal.dfid.gov.uk
aipbeta.dfid.gov.uk
adfs.dfid.gov.uk
devtracker.dfid.gov.uk
HRPassport.dfid.gov.uk
www.dfid.gov.uk
devtracker.dfid.gov.uk
www.gov.uk
www.gov.uk
intouch.dfid.gov.uk
adfs3.dfid.gov.uk
*.vault.dfid.gov.uk
devtracker.dfid.gov.uk
intouch2.dfid.gov.uk
DFIDCmg.dfid.gov.uk
intouch5.dfid.gov.uk
projects.dfid.gov.uk
devtracker.dfid.gov.uk
intouch3.dfid.gov.uk
dfidexchange.dfid.gov.uk
intouch2.dfid.gov.uk
DFIDCmg.dfid.gov.uk
Devhrpassport.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker.dfid.gov.uk
Devhrpassport.dfid.gov.uk
insight.dfid.gov.uk
www.gov.uk
*.dfid.gov.uk
www.gov.uk
*.dfid.gov.uk
supplierportal.dfid.gov.uk
devtracker.dfid.gov.uk
adfs3.dfid.gov.uk
devtracker.dfid.gov.uk
vault.dfid.gov.uk
intouch6.dfid.gov.uk
adfs3.dfid.gov.uk
insight.dfid.gov.uk
dfidexchange.dfid.gov.uk
www.dfid.gov.uk
Access.dfid.gov.uk
Index.dfid.gov.uk
DfidCmg.Dfid.gov.uk
devtracker-ci.dfid.gov.uk
dfid.gov.uk
supplierportal.dfid.gov.uk
www.gov.uk
www.gov.uk
devtracker.dfid.gov.uk
*.dfid.gov.uk
skypeexternal.dfid.gov.uk
azpphrpassport.dfid.gov.uk
supplierportal.dfid.gov.uk
adfs.dfid.gov.uk
devtracker.dfid.gov.uk
*.dfid.gov.uk
www.gov.uk
azpphrpassport.dfid.gov.uk
dfidexchange.dfid.gov.uk
supplierportal.dfid.gov.uk
www.gov.uk
intouch5.dfid.gov.uk
cscuk.dfid.gov.uk
www.gov.uk
adfstoken.dfid.gov.uk
dfidexchange.dfid.gov.uk
www.dfid.gov.uk
Devhrpassport.dfid.gov.uk
*.dfid.gov.uk
vault.dfid.gov.uk
access.dfid.gov.uk
dfidexchange.dfid.gov.uk
devtracker.dfid.gov.uk
supplierportal.dfid.gov.uk
dfidexchange.dfid.gov.uk
dfidexchange.dfid.gov.uk
access.dfid.gov.uk
devtracker.dfid.gov.uk
devtracker-int.dfid.gov.uk
www.gov.uk
Index.dfid.gov.uk
azpphrpassport.dfid.gov.uk
adfs.dfid.gov.uk
*.vault.dfid.gov.uk
devtracker-ci.dfid.gov.uk

Certificate

The complete raw certificate details for Index.dfid.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18251093542473225894282172015459732849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Index.dfid.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 679611575591037800661529894777389146279707941142000007078803985061867961098743662146319184282449157446467066198783797406226298588276515363370377575429971132523686025865525967027361013614795721437949495668937898003469869811504505747932520946327779992749381309749155822694876333770021973457394424013927810068016305344673455697391700604491139821573331536480372467534963094658764249561965358961611601485682692470992950887555806799109926598836238681664187007989761316067426894810554698373282151208839624141521156869624304960121866428553397954952705090850607969594965351837088345620314711319380879641684266413282547094546097486321199349014143683928493407776686602733999187177765292489379680956942993002281327846535771109692803398013119449995867718254057620394512974942779029852323739097946028489165961794397630680573700857996288726983538122612469841158530640111672170613284345512010929096768655804390387334932487486668686041778043016590155100056145722408251920677733663113162369525994777984624534032339692157768215423682306418387164683504241940585800001131704009401193747090828756789845987883479925955226404072976018309709593873313425370375055101423630296956712585301357946946931409218691981496335392496403978670902109756732774951137104609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 12c9889b2fc9447a7d12f1df4003429892c724d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac00977bfa3ff9392383241b8c0e120b1c0b08cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Index.dfid.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007197649a18e898bfa3be691fa316bc1f190e3619df8f92d61af499a348d23fde86d304b3ec6ded12c9e1daca6dd0b3fb7e4f2e937fea8f6ff04add8b93af52ce4717c95a89eff8f874e80a0dc9926146b57ebe975564a2771e0f53750580dbbfa619fa6061358008edfef3559ee0d62d5f71c40aaf743cea7e95567a6ddb4039d16befd0975178ec58ab300a3ead77eca7416d103bee8dd7f71bdc57c80166407ff9c41410b70d1765381e2a71199e762060de49fe294ff79e34a3daa14c51cc1066df58f3b8be88a637a602ad917d431a4a662c054df3a1494df4b0db5e9ba24066ecd9563cc8000d1bfa35a5ca7a03aab0fcac88b6b0efc26b5b1d74f18b92