www.galbraithgroup.com

- CKD Galbraith LLP -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:41:fa:13:f2:1c:f0:0e:6d:97:bf:77:fe:db:55:5c was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CKD Galbraith LLP

Organization: CKD Galbraith LLP
Locality: Edinburgh
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:41:fa:13:f2:1c:f0:0e:6d:97:bf:77:fe:db:55:5c
Serial Number (int): 5659483461610783909920124581466297692
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c0:ff:30:d2:76:9a:fc:30:cf:8e:e1:d8:1a:a1:97:ad:8f:ec:74:c8
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 91:fd:ec:19:dd:65:33:e9:91:c3:32:ee:3e:fb:fc:53:ee:80:ec:15
Fingerprint (sha256): ba:d0:5f:12:86:78:86:2b:1d:70:70:34:8f:2f:1e:d4:4c:de:4e:a0:8d:d3:27:db:c2:d3:74:2c:6f:46:a5:0a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl

Check the revocation status for certificate www.galbraithgroup.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.galbraithgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.galbraithgroup.com
tracker.galbraithgroup.com
galbraithgroup.com
www.sportinglets.co.uk
sportinglets.co.uk
www.ossian.co
ossian.co

Other certificates including the domain name galbraithgroup.com

(limited to 100 certificates)
suport.staff.utcluj.app
helpdesk.centurionukrs.com
support.ecctis.com
servicedesk.cheaperwaste.co.uk
support.tuxexpert.com
support.ecctis.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
ithelpdesk.uteco.com
sd.sch1584.su
*.galbraithgroup.com
support-services.gruener-punkt.de
servicedesk.quorumdev.com
dsi.alivetravel.com
suport.staff.utcluj.app
servicedesk.cheaperwaste.co.uk
galbraithgroup.com
helpdesk.zultys.com
sd.sch1584.su
support-services.gruener-punkt.de
support.tuxexpert.com
helpdesk.derbigum.com
support-services.gruener-punkt.de
servicedesk.quorumdev.com
ithelpdesk.uteco.com
techteam.awayresorts.co.uk
support.gjesdal.kommune.no
ithelpdesk.uteco.com
ithelpdesk.uteco.com
dsi.alivetravel.com
servicedesk.envisionpharma.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.beauchamps.ie
support-services.gruener-punkt.de
helpdesk.derbigum.com
servicedesk.chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
servicedesk.beauchamps.ie
suport.staff.utcluj.app
dataroom.galbraithgroup.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
sd.sch1584.su
helpdesk.pgzinternational.com
techteam.awayresorts.co.uk
support.languagelink.ru
servicedesk.cheaperwaste.co.uk
*.galbraithgroup.com
servicedesk.envisionpharma.com
publications.galbraithgroup.com
servicemanager.loacker.com
sd.sch1584.su
itservicedesk.eu.anritsu.com
servicedesk.cheaperwaste.co.uk
servicedesk.solidsolutions.co.uk
helpdesk.zultys.com
helpdesk.derbigum.com
servicedesk.solidsolutions.co.uk
servicedesk.trencon.co.za
support.languagelink.ru
servicedesk.cheaperwaste.co.uk
techteam.awayresorts.co.uk
servicedesk.trencon.co.za
servicedesk.solidsolutions.co.uk
www.galbraithgroup.com
galbraithgroup.com
servicedesk.quorumdev.com
galbraithgroup.com
www.galbraithgroup.com
servicedesk.cheaperwaste.co.uk
dsi.alivetravel.com
support.gjesdal.kommune.no
support.gjesdal.kommune.no
servicedesk.solidsolutions.co.uk
itservicedesk.apc-overnight.com
helpdesk.galbraithgroup.com
*.galbraithgroup.com
servicedesk.abbotsholme.co.uk
support.ecctis.com
servicedesk.trencon.co.za
helpdesk.derbigum.com
servicedesk.envisionpharma.com
support.languagelink.ru
support.ecctis.com
galbraithgroup.com
*.galbraithgroup.com
helpdesk.zultys.com
helpdesk.zultys.com
support.gjesdal.kommune.no
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
suport.staff.utcluj.app
servicedesk.abbotsholme.co.uk
servicedesk.cheaperwaste.co.uk
itservicedesk.eu.anritsu.com

Certificate

The complete raw certificate details for www.galbraithgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xQt/A8zGTIrQau+fPuV
I3wp8Qx+nVI9i2dHvV9ETBAj/cLX7sRJZKVpeuk+2iMa+yy9PDrQCmshFTTx5c0/
Y/RprgNXpxS8C2vuaFNVfXRkQSzTNnWOH1HQQF0NsV3rZPVEpCA1cnsxNs9YUOug
M3qeyoQO+X51m66nQ8OgamudaZt8gMnDSP8X4w5/fO5ocafkLHeemlcUrrKWXPug
W7vgkeXscXmFbIYarhkxjFb3dAg+DL6EL503Otu899f6OSsxF6zGMysg3+QEi4TO
L42SY60CvbSd8RSHYP13VURPHgn7dC4Px2bhdHSH+dmfOD/Wg6FcQkoHbGQYepk6
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5659483461610783909920124581466297692
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CKD Galbraith LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.galbraithgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26646233292971720177137870761101126816012931274283878565072977121324476052202037400677608033247306390092183461299105343752999548111881074513717669538155156405616835698968996324565253545305163525123879613511119898156066581777718998645583104902931804917993733280265048971870872197580019477052511957185236256491566359730772951482662017631776052936101944953097470142456605841200454456690927554924938431242656793035067088707723363221074995460406304049631006843802501881996023597689205462637484957064438776563241309620223055887885165995028551855302149356456680116742222655860494768620398535436803276917157724997265934334709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0ff30d2769afc30cf8ee1d81aa197ad8fec74c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galbraithgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracker.galbraithgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galbraithgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportinglets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportinglets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ossian.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ossian.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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