publications.galbraithgroup.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 04:48:75:14:09:7d:1c:dd:8e:6b:07:ce:24:94:1a:73 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=publications.galbraithgroup.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:48:75:14:09:7d:1c:dd:8e:6b:07:ce:24:94:1a:73
Serial Number (int): 5693131986377665740693977339195038323
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 71:f6:17:1c:34:83:e8:16:5e:56:b5:36:68:28:26:1d:93:7d:dd:ae
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 34:a3:3d:40:7e:5d:17:0d:fb:3a:57:56:98:57:55:ce:b4:e7:86:41
Fingerprint (sha256): 8c:59:da:11:b0:f6:19:6e:e5:b7:7e:fc:be:ec:84:ab:0b:fd:52:33:66:74:95:ac:0b:40:b2:c1:5f:5d:2a:a5

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate publications.galbraithgroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for publications.galbraithgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

publications.galbraithgroup.com

Other certificates including the domain name galbraithgroup.com

(limited to 100 certificates)
suport.staff.utcluj.app
helpdesk.centurionukrs.com
support.ecctis.com
servicedesk.cheaperwaste.co.uk
support.tuxexpert.com
support.ecctis.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
ithelpdesk.uteco.com
sd.sch1584.su
*.galbraithgroup.com
support-services.gruener-punkt.de
servicedesk.quorumdev.com
dsi.alivetravel.com
suport.staff.utcluj.app
servicedesk.cheaperwaste.co.uk
galbraithgroup.com
helpdesk.zultys.com
sd.sch1584.su
support-services.gruener-punkt.de
support.tuxexpert.com
helpdesk.derbigum.com
support-services.gruener-punkt.de
servicedesk.quorumdev.com
ithelpdesk.uteco.com
techteam.awayresorts.co.uk
support.gjesdal.kommune.no
ithelpdesk.uteco.com
ithelpdesk.uteco.com
dsi.alivetravel.com
servicedesk.envisionpharma.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.beauchamps.ie
support-services.gruener-punkt.de
helpdesk.derbigum.com
servicedesk.chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
servicedesk.beauchamps.ie
suport.staff.utcluj.app
dataroom.galbraithgroup.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
sd.sch1584.su
helpdesk.pgzinternational.com
techteam.awayresorts.co.uk
support.languagelink.ru
servicedesk.cheaperwaste.co.uk
*.galbraithgroup.com
servicedesk.envisionpharma.com
publications.galbraithgroup.com
servicemanager.loacker.com
sd.sch1584.su
itservicedesk.eu.anritsu.com
servicedesk.cheaperwaste.co.uk
servicedesk.solidsolutions.co.uk
helpdesk.zultys.com
helpdesk.derbigum.com
servicedesk.solidsolutions.co.uk
servicedesk.trencon.co.za
support.languagelink.ru
servicedesk.cheaperwaste.co.uk
techteam.awayresorts.co.uk
servicedesk.trencon.co.za
servicedesk.solidsolutions.co.uk
www.galbraithgroup.com
galbraithgroup.com
servicedesk.quorumdev.com
galbraithgroup.com
www.galbraithgroup.com
servicedesk.cheaperwaste.co.uk
dsi.alivetravel.com
support.gjesdal.kommune.no
support.gjesdal.kommune.no
servicedesk.solidsolutions.co.uk
itservicedesk.apc-overnight.com
helpdesk.galbraithgroup.com
*.galbraithgroup.com
servicedesk.abbotsholme.co.uk
support.ecctis.com
servicedesk.trencon.co.za
helpdesk.derbigum.com
servicedesk.envisionpharma.com
support.languagelink.ru
support.ecctis.com
galbraithgroup.com
*.galbraithgroup.com
helpdesk.zultys.com
helpdesk.zultys.com
support.gjesdal.kommune.no
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
suport.staff.utcluj.app
servicedesk.abbotsholme.co.uk
servicedesk.cheaperwaste.co.uk
itservicedesk.eu.anritsu.com

Certificate

The complete raw certificate details for publications.galbraithgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4luygUJ3l5zzcWgSDt6
dliBlTMQ4Wt5b4MiPa2beHBIYI3ozjSMBNHyb+tmKTXVLqfTn/hgz/ASAe+w/YK6
qAzyf0PkLzmHv4bYd/18e7MGiiRnEJSHnWlzgHoYFt+/YI6daLsxgNf89+S0Oyai
IKz4tVI2S0McgFI1IrF+Az4430Z/Ry/4mi/ULFMg78EpUmjk+yuNSfGhHt1FsVRZ
cGxiyZRGK3cUA27c7nz0TxlCRQjZ0TaSKyvoF62OlqH44WGl3H+oi19J03vdP6pD
/3mmbj2Zm1EoLWpJ2ywaRzvTacDPh7AXxwDZJ5QN64+g/+tpD6WNuhRzkXwMPgmd
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5693131986377665740693977339195038323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'publications.galbraithgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25189193313015774786330787491939242265121559181114891613018978591380249034373231207072373484369860766308071850731380316859325976203283027294774874564125675084450812722359357864301423501162050423267695176899817972843685162102224852693831724218325170198320701598281463610324805118094157253342121344038263798133189015732190039079292762909866078531304579263549986415336301814256717176291212226815789025826094379586230589036513400141886509101846554303958192650370635952719853912742378533929888945531400281322246725026750510987891966281863643199924307656369723419273608683865810660643767320207199720199598787429048808742201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71f6171c3483e8165e56b5366828261d937dddae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications.galbraithgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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