*.dev.benchmarxkitchens.co.uk

- Travis Perkins Plc -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 26:1d:de:d6:04:06:41:b5:56:55:ef:f0:a6:f7:48:19:50:d3:0e:d2 was issued on by QuoVadis Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Travis Perkins Plc

Organization: Travis Perkins Plc
Organization unit: Group IT Department
State / Province: Northamptonshire
Locality: Northampton
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 26:1d:de:d6:04:06:41:b5:56:55:ef:f0:a6:f7:48:19:50:d3:0e:d2
Serial Number (int): 217607782655316060335482862376036755213917556434
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 5d:38:a0:d6:d5:13:95:fe:22:30:12:c9:dc:b0:19:89:9c:ea:d6:52
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): c0:88:a8:62:eb:ea:00:1c:6c:2e:9e:3e:75:31:55:6d:48:9a:ec:0d
Fingerprint (sha256): 98:37:80:95:60:f8:77:fc:5b:4b:fd:4b:ad:3b:e6:3a:72:26:b8:40:f8:c1:5c:f3:34:7e:3e:ff:10:10:0a:35

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate *.dev.benchmarxkitchens.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.dev.benchmarxkitchens.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dev.benchmarxkitchens.co.uk
dev.benchmarxkitchens.co.uk

Other certificates including the domain name benchmarxkitchens.co.uk

(limited to 100 certificates)
*.dev.benchmarxkitchens.co.uk
benchmarxkitchens.co.uk
reporting.benchmarxkitchens.co.uk
api.live.benchmarxkitchens.co.uk
benchmarxkitchens.co.uk
benchmarxkitchens.co.uk
benchmarxkitchens.co.uk
benchmarxkitchens.co.uk
*.dev.benchmarxkitchens.co.uk
benchmarxkitchens.co.uk
benchmarxkitchens.co.uk
*.dev.benchmarxkitchens.co.uk
benchmarxkitchens.co.uk
benchmarxkitchens.co.uk
*.dev.benchmarxkitchens.co.uk
*.dev.benchmarxkitchens.co.uk
reporting.benchmarxkitchens.co.uk
www.benchmarxkitchens.co.uk
benchmarxkitchens.co.uk
reporting.benchmarxkitchens.co.uk
benchmarxkitchens.co.uk
*.dev.benchmarxkitchens.co.uk
*.dev.benchmarxkitchens.co.uk
www.benchmarxkitchens.co.uk

Certificate

The complete raw certificate details for *.dev.benchmarxkitchens.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJllAGO9wU/DFNl6hV+5
GANLjHbhN+Bhvpo5ifAQVn+4r+8f5P8MfqZVRP6ChiBAJcES+synHssBGwJN89ZG
lvUk4x8d+F+7tVRWtq2acuqW/dqWthP+qef1+bIS12htMQjZp/qXrJ7KopxfSVHk
D4liyJCRh26gnEZRfEVmQ2jKTufOkrgXsPeKnOMUu7afJo7UE0ub+fEZWgiZmbFc
DameOS1UVhQwRGQSLDc8mdECg0W8J90eYxQ++tZw2W5nJ33T0sqChgIGzPykBrlw
0c/FJcrZEUv8FUjPMm5QYJS6ZZNTfk0R6Oh/1bFCxOAmDpuWlyN/qJ1ZXxWLQMQC
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 217607782655316060335482862376036755213917556434
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-11 11:52:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-20 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Northamptonshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Northampton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Travis Perkins Plc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Group IT Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dev.benchmarxkitchens.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23808442999113376310306491649032957863723013576434651182444632449135669363208710826623763003159430298163376541646467460545171164410580111452834044520621520339044158595564059111782557233838527994008233359051801610021278179749889163444356430389720137804621120105088099484705949320823344506798755130349822250081995154359569397657596958283262852210384966107644832662973724564751140771659287363157718069497396412128847856060595077594770153128020409674322936667046886180590173076483678987946495224486669470426882575059336037538681566661167312383001015043551737567343151918837170148525388527888756219485036994436107956650549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.benchmarxkitchens.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.benchmarxkitchens.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d38a0d6d51395fe223012c9dcb019899cead652
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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