*.stevenage.gov.uk

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 08:c9:15:fd:00:92:13:af:12:6a:e9:b7:b8:7d:8a:a1 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.stevenage.gov.uk

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:c9:15:fd:00:92:13:af:12:6a:e9:b7:b8:7d:8a:a1
Serial Number (int): 11677921610348216254655653600747686561
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 05:dd:2b:78:0f:57:e1:97:d6:85:12:d2:77:b4:8e:30:d1:95:3b:b9
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 60:f6:2a:ff:bb:ae:35:cb:ee:8b:94:18:97:db:a8:a8:48:4d:25:f2
Fingerprint (sha256): 95:e0:a3:49:f6:2f:79:de:3f:f0:e0:f8:f6:89:9f:d0:cc:a8:c2:48:06:46:9f:77:c6:f1:32:d9:cb:63:b1:75

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate *.stevenage.gov.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.stevenage.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.stevenage.gov.uk
stevenage.gov.uk

Other certificates including the domain name stevenage.gov.uk

(limited to 100 certificates)
www.fixmystreet.com
www.stevenage.gov.uk
www.fixmystreet.com
webmail.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
mymail.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
*.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
myaccount.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
remote.stevenage.gov.uk
*.stevenage.gov.uk
eforms.stevenage.gov.uk
mymail.stevenage.gov.uk
*.stevenage.gov.uk
mymail.stevenage.gov.uk
*.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
dwp-cis.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
mymail.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
lahdenymparistovahti.fi
www.fixmystreet.com
www.fixmystreet.com
publicaccess.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
remote.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
mymail.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
payments.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
mymail.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
mydesktop.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
www.fixmystreet.com
www.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
mymail.stevenage.gov.uk
eforms.stevenage.gov.uk
lahdenymparistovahti.fi
*.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com
dwp-cis.stevenage.gov.uk
www.fixmystreet.com
www.fixmystreet.com

Certificate

The complete raw certificate details for *.stevenage.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDAaZtaj1xHhLn+WwTiN
plGGIiesOM2PE2ZAqT2HbmQFuP84idSUxJdpVhKaLw2UzkgwJJ4C15rVzA1LPIxu
+u4XX9duB1vJeCyk04AQ8aLO891zYjSK/6PHRTqfLGmC5WFW5gaiZ75BUOgsa0xn
rQiP603KERQTGwGg+7R9VxeraoII9s+Mn7ezSQ1QSb7PqxJHCs6PFGzTKw1n76Fe
Nuf26s6y/V81iwpWYdV/ubBLk1aIBuhx3ZNRzTZAAwc82mx7h39eyMuyxdXXkCpN
x4BrCC7mQ2W4/YhDHiIjlZqgf63EO8foy4PHMEGJk0LJkbq2sJU4B27wtEOUf6/s
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11677921610348216254655653600747686561
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.stevenage.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25776334751388880426655625289037143764982479119135946608984520344112307623755790190432882874484485861272016218138849394057902660184386868714974534057923456680553715441147284671763700127875519069397595937837826666651724885247062869041136512969134256459529678557749303694269629884739574978823575036960995920823174486831566325520753879501680935073118950993753763485195984559684621399039481263566089684599762264637567602265564940067793585711215012437171188290689904311451371499584295056603264148962965053563465333874933731384127997659690211089050958302989118444503481365304314368593591386795471174323781910210136377388077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05dd2b780f57e197d68512d277b48e30d1953bb9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stevenage.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevenage.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001862770b0780000040300483046022100f740a0cdf9f609f5b1c3405dd09c36bfd1a9cab9295a7eb9a7ee3bdbaca24561022100e555626ce05fbecbaca4232bf08627b2c67189206fc6fb4052a68c020e661db000770073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b5000001862770b0df0000040300483046022100ae1d0e594b86db50f8cb51865a78c8f6118fa9d837f915e7b3cc0921990c80bd022100dea924bf790d7c7ac5bdeb92fc97219506cb960f34eb69c8e4f87143d0efe36d00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001862770b0b50000040300473045022100f0dc647e00e43944076ee939395efe1009de75efc66e6a01640b5ea6d0fa7b1002206f519c26d6af96eb93588f690ffe45da6ff7223e71c0543237a7d3ac712dfc6d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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