insights.lawsociety.org.uk

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 5f:8a:0e:01:21:db:ca:03:70:17:dd:df was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=insights.lawsociety.org.uk,OU=Domain Control Validated,C=GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5f:8a:0e:01:21:db:ca:03:70:17:dd:df
Serial Number (int): 29567973830151870342971776479
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 74:a8:f2:e5:21:ff:07:08:95:bd:7b:1f:e4:4e:5f:d2:9a:13:a0:54
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 50:ef:6e:fd:a5:78:47:f3:a9:0d:03:cb:ef:23:11:e8:bb:6a:9c:3e
Fingerprint (sha256): 81:95:c1:c5:71:64:d0:60:30:b6:76:5e:7e:8a:1f:1c:22:86:d9:87:8f:f4:f4:72:19:ee:87:01:4b:e9:d0:10

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate insights.lawsociety.org.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for insights.lawsociety.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

insights.lawsociety.org.uk

Other certificates including the domain name lawsociety.org.uk

(limited to 100 certificates)
www.lawsociety.org.uk
webmail.lawsociety.org.uk
bookshop.lawsociety.org.uk
pages.lawsociety.org.uk
adfe6.abasoft.co.uk
sip.lawsociety.org.uk
remotedesktop.lawsociety.org.uk
diversity.lawsociety.org.uk
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
pages.lawsociety.org.uk
*.idp.lawsociety.org.uk
pages.lawsociety.org.uk
adtest.abasoft.co.uk
email.lawsociety.org.uk
diversity.lawsociety.org.uk
excellenceawards.lawsociety.org.uk
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
portal.lawsociety.org.uk
wvfe2.webvisioncloud.com
*.lawsociety.org.uk
bookshop.lawsociety.org.uk
*.lawsociety.org.uk
insights.lawsociety.org.uk
wvfe2.webvisioncloud.com
*.lawsociety.org.uk
adfrontendnoncentaur2.abasoft.co.uk
adtest.abasoft.co.uk
www.lawsociety.org.uk
adfrontendnoncentaur2.abasoft.co.uk
wvfe2.webvisioncloud.com
*.lawsociety.org.uk
pages.lawsociety.org.uk
www.lawsociety.org.uk
bookshop.lawsociety.org.uk
bookshop.lawsociety.org.uk
pages.lawsociety.org.uk
solicitors.lawsociety.org.uk
lms-wp-stg-vm.learn.lawsociety.org.uk
wvfe2.webvisioncloud.com
webmail.lawsociety.org.uk
bookshop.lawsociety.org.uk
diversity.lawsociety.org.uk
pages.lawsociety.org.uk
www.lawsociety.org.uk
adfrontendnoncentaur2.abasoft.co.uk
wvfe1.webvisioncloud.com
www.lawsociety.org.uk
excellenceawards.lawsociety.org.uk
adfe6.abasoft.co.uk
wvfe2.webvisioncloud.com
lawsociety.org.uk
adfrontendnoncentaur2.abasoft.co.uk
sni.cloudflaressl.com
www.lawsociety.org.uk
portal.lawsociety.org.uk
pages.lawsociety.org.uk
groupgateway.lawsociety.org.uk
events.lawsociety.org.uk
www.lawgazette.co.uk
solicitors.lawsociety.org.uk
*.lawsociety.org.uk
solicitors.lawsociety.org.uk
diversity.lawsociety.org.uk
*.lawsociety.org.uk
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
excellenceawards.lawsociety.org.uk
sni.cloudflaressl.com
pages.lawsociety.org.uk
lawsociety.org.uk
bookshop.lawsociety.org.uk
*.lawsociety.org.uk
adfe6.abasoft.co.uk
adtest.abasoft.co.uk
*.lawsociety.org.uk
www.lawsociety.org.uk
workforus.lawsociety.org.uk
wvfe2.webvisioncloud.com
webmail.lawsociety.org.uk
governance.lawsociety.org.uk
adfrontendnoncentaur2.abasoft.co.uk
events.lawsociety.org.uk
portal.lawsociety.org.uk
solicitorsabroad.lawsociety.org.uk
adfrontendnoncentaur2.abasoft.co.uk
adtest.abasoft.co.uk
insights.lawsociety.org.uk
wvfe2.webvisioncloud.com
workforus.lawsociety.org.uk
adfrontendnoncentaur2.abasoft.co.uk
solicitorsabroad.lawsociety.org.uk
solicitors.lawsociety.org.uk
email.lawsociety.org.uk
*.lawsociety.org.uk
international.lawsociety.org.uk
wvfe2.webvisioncloud.com
www.lawsociety.org.uk

Certificate

The complete raw certificate details for insights.lawsociety.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSOFcnBz4KF/78g6apEb
jsjgMVdKFaU2ecKUNAvfRqjptf4KRLl2/8NsoT/PDrzYi6uwAmEJeWGjgVBLvxeS
JZPQ3DNfS7w0zRO+g3ZxNhMnoh5f2D55JkhUT60WIKza7g1KHA3r4CMs/Cu+WyMJ
rd+S8B4TT9f5dN7FImcuesYiQnarip6EGukwmZaISkOYrSistWw8t4681gHpSJEX
bNytcdtB9AsS/HQlv4O+7qZ/7vVoncZgPfwO1+tXkcKSfgncbWR/3EPWojCXQkp7
zfYciFB2cuLWQVpocyYzf8FtTAtY6CxBhm/Ili61b87xR0j2cBWKmwcfNSayVKlN
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29567973830151870342971776479
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-03 23:37:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-03 23:37:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'insights.lawsociety.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24381509053199722256969164127537160725616004379284742323458026043724922184475624143437892886037014685157359006156689222854586600957409469045679400221708770604938003647941731339076267452984779857271944698083617908480357588931205069302191611498517769185425944821553910578568873159107792013036891374611765809258074527767722683337812754576773982288265306949911812681549188000351400868217390202145744433705686887057490342115511887740127003504455261670981731922704189238904820203664472322730495129203935955929620953475582422281291205512335574354037545500001366724590810647279613624349525208127809119664999585173084595375587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.lawsociety.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74a8f2e521ff070895bd7b1fe44e5fd29a13a054
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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