vpn.ocubis.co.uk

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 07:ff:95:56:ed:b4:8f:aa:fe:eb:b9:59:5a:a2:6a:ca was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vpn.ocubis.co.uk

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:ff:95:56:ed:b4:8f:aa:fe:eb:b9:59:5a:a2:6a:ca
Serial Number (int): 10631660635639944909140063898828958410
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 37:9c:2b:33:b4:90:58:86:1c:d4:98:f1:cc:36:4d:18:7e:1a:27:a0
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): ca:01:6a:cd:a4:ea:ac:d3:70:ca:18:2d:15:58:d5:45:e8:04:37:c6
Fingerprint (sha256): 9c:8f:b2:85:00:0d:dd:c1:e2:e9:b3:e9:82:c7:93:90:03:85:fc:6f:99:90:1b:36:27:26:cb:5c:94:c9:9d:b2

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate vpn.ocubis.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.ocubis.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.ocubis.co.uk

Other certificates including the domain name ocubis.co.uk

(limited to 100 certificates)
servicedesk.usspeaking.com
ithelpdesk.dccoilireland.com
helpdesk.hlnsc.ac.uk
ithelp.visionrt.com
servicedesk.usspeaking.com
servicedesk.hermesairports.com
helpdesk.kleen-tex.eu
itdesk.mkspamp.com
support.erm.com
it.littlegarth.org
helpdesk.kleen-tex.eu
servicedesk.hafenwien.com
itservice.wearebulletproof.com
support.erm.com
servicedesk.danbred.com
ithelpdesk.farnboroughairport.com
ithelp.visionrt.com
helpdesk.troax.com
vpn.ocubis.co.uk
ithelpdesk.farnboroughairport.com
servicedesk.kuits.com
soporte.llorenteycuenca.com
ithelpdesk.ocubis.co.uk
ithelpdesk.farnboroughairport.com
ithelpdesk.dccoilireland.com
*.ocubis.co.uk
cau.sas-agri.com
servicedesk.vhg.co.uk
support.erm.com
ithelpdesk.dccoilireland.com
servicedesk.hermesairports.com
ocubis.co.uk
servicedesk.hermesairports.com
ithelpdesk.dccoilireland.com
ithelpdesk.farnboroughairport.com
helpdesk.fast.eu
helpdesk.kleen-tex.eu
it.littlegarth.org
ithelpdesk.dccoilireland.com
ithelpdesk.farnboroughairport.com
it.littlegarth.org
servicedesk.hafenwien.com
portalgestion.gruposiete.es
ithelpdesk.dccoilireland.com
servicedesk.nilgosc.org.uk
techsupport.mickgeorge.co.uk
soporte.llorenteycuenca.com
servicedesk.kuits.com
servicedesk.hermesairports.com
servicedesk.hermesairports.com
helpdesk.criticaltechworks.com
soporte.llorenteycuenca.com
ithelpdesk.dccoilireland.com
itdesk.mkspamp.com
vpn.ocubis.co.uk
servicedesk.hermesairports.com
support.erm.com
support.jjhousing.co.uk
helpdesk.hlnsc.ac.uk
ithelpdesk.holmes-hills.co.uk
ithelpdesk.dccoilireland.com
servicedesk.nilgosc.org.uk
ithelpdesk.farnboroughairport.com
helpdesk.usborne.co.uk
ithelpdesk.farnboroughairport.com
servicedesk.groupe-r.ch
ithelpdesk.farnboroughairport.com
servicedesk.hermesairports.com
servicedesk.usspeaking.com
servicedesk.usspeaking.com
helpdesk.troax.com
itsupport.alphaplusgroup.co.uk
helpdesk.troax.com
helpdesk.troax.com
servicedesk.fynbus.dk
helpdesk.fsbtech.com
soporte.llorenteycuenca.com
servicedesk.hermesairports.com
helpdesk.fast.eu
itdesk.mkspamp.com
ithelpdesk.holmes-hills.co.uk
ithelpdesk.ocubis.co.uk
ithelpdesk.ocubis.co.uk
servicedesk.hermesairports.com
ithelpdesk.farnboroughairport.com
helpdesk.hlnsc.ac.uk
helpdesk.kleen-tex.eu
servicedesk.hermesairports.com
ithelpdesk.farnboroughairport.com
it.littlegarth.org
helpdesk.hlnsc.ac.uk
support.claytonglass.co.uk
itsupport.clinisys.com
servicedesk.hermesairports.com
ithelpdesk.holmes-hills.co.uk
ithelpdesk.ocubis.co.uk

Certificate

The complete raw certificate details for vpn.ocubis.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10631660635639944909140063898828958410
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.ocubis.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839194664336027097653242890533225532407712582325358233888002123660237303809152903795260254594588273693236659470968856545571550250806532428313689273351777288963922883372957384955758427733726268506327517681732540935169651287519401073029773340279182997611232980736988614321042348978507176541038033332032931013683818368267128214398211472215263618031970061645639597190948137649773880431885801838314733543237320569191111491523636655620508776385929120277803132756292448569377848542534855618629970832314934552836261772966862804766254232435545243290697800148641193474694319708011785432570113804737137487555763072036038960367293376068191274485806023758967466549931642478968610606016330856739755995216569303178286545921195081004487326456356187632911959423127270754930563045120799681767318417833483618394492689615746181957224098990758444342737894861993648320429924811461244103452166449879343169665946936816773799476051721857548742159326771569941702623852081041681757495826963270408319560147237361044932147368282431965549375839599140235007893684642356950881889625339686742199507262854245087554610669343791360711590241406877149282666161478341611883698050583754764088955140206907380983024823119412750551225697167810128047638309339059383646445399641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							379c2b33b49058861cd498f1cc364d187e1a27a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.ocubis.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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