secure.greenlightinsurance.co.uk

- secure.greenlightinsurance.co.uk -

Issued by GeoTrust DV SSL CA

About this certificate

This digital certificate with serial number 03:02:a2 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

secure.greenlightinsurance.co.uk

Company registration number: rloEf2Rf3EEZlemJv-pUkLTmxEGqiMcb
Organization: secure.greenlightinsurance.co.uk
Organization unit: GT30613838
Organization unit: See www.geotrust.com/resources/cps (c)11
Organization unit: Domain Control Validated - QuickSSL(R) Premium
Country: GB

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:02:a2
Serial Number (int): 197282
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: d9:d8:82:10:f2:9c:fd:29:8f:75:fa:6b:97:e8:4c:3c:e7:45:bc:24
AuthorityKeyId: 8c:f4:d9:93:0a:47:bc:00:a0:4a:ce:4b:75:6e:a0:b6:b0:b2:7e:fc

Fingerprint (sha1): a3:61:10:1f:f2:f1:10:78:66:f2:47:1c:0e:41:08:fc:94:cc:1e:66
Fingerprint (sha256): be:0a:65:ae:df:2d:d6:d1:6a:34:e6:fe:4e:b6:e9:ac:82:6b:95:1b:15:ab:97:43:9f:3b:9b:5b:53:fe:bc:64

Issuing Certificate URL: http://gtssldv-aia.geotrust.com/gtssldv.crt

Revocation information

CRL Distribution Point: http://gtssldv-crl.geotrust.com/crls/gtssldv.crl

Check the revocation status for certificate secure.greenlightinsurance.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.greenlightinsurance.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.greenlightinsurance.co.uk

Other certificates including the domain name greenlightinsurance.co.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for secure.greenlightinsurance.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAwKiMA0GCSqGSIb3DQEBBQUAMGExCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMR0wGwYDVQQLExREb21haW4gVmFsaWRh
dGVkIFNTTDEbMBkGA1UEAxMSR2VvVHJ1c3QgRFYgU1NMIENBMB4XDTExMTEwNzAz
NDYzN1oXDTEyMTIwODIwNTE1OFowggEPMSkwJwYDVQQFEyBybG9FZjJSZjNFRVps
ZW1Kdi1wVWtMVG14RUdxaU1jYjELMAkGA1UEBhMCR0IxKTAnBgNVBAoTIHNlY3Vy
ZS5ncmVlbmxpZ2h0aW5zdXJhbmNlLmNvLnVrMRMwEQYDVQQLEwpHVDMwNjEzODM4
MTEwLwYDVQQLEyhTZWUgd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvY3BzIChj
KTExMTcwNQYDVQQLEy5Eb21haW4gQ29udHJvbCBWYWxpZGF0ZWQgLSBRdWlja1NT
TChSKSBQcmVtaXVtMSkwJwYDVQQDEyBzZWN1cmUuZ3JlZW5saWdodGluc3VyYW5j
ZS5jby51azCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJGFeP0ZttEC
EwqRxJ8KPZHy4u2+u1R+3/WffpA4m9f+cSN71qINAAiNvccvG24qGXYsmvSA0xAV
Gr0sTSBba3gjbGMAtuLSXoEsiFebH56REN2RC7bZAvdK102r59MrQyXpJr/4yA9X
Jdf0FqRjTEQw+Bl3NEVwM6QG2b5c09CFr+fYFNc0gw3YCaqWAMdfVdMV7Je7y11V
ngMQ5Ap1N8Cd3i+hbg2xWpUTNFPYb/v1GmeVVU96msIhkYShrsDBHSZKzgBdHs9a
Nk+w/Q+bODWSXz4BB37m9BO9mDzwPuRUqrTuuP4T0PlJMXt2J6tdhCqEiA46/TO/
n28O0GC0HRwltN9v0aodHRKh8TZlAo/2j2wa/j2sHlYKdKu+IuPkNjNHe2Ophugm
jqX99rD8PrFSp8L2z84AezqFwCSFy1e4WaNTcBDMDsgCIOOMGtpdHxN09BGub+u2
GdTFS715mjXiCJ++9TiyrLVYLQ+E63bgLpalR4BXA0yuplIw1aVZga6KIBQhmUEb
Xt2wGz1sd6fc7fUR7/KDvKI1unQVoXjilsX1w7QX5ZdhGsDiMxeWPOY1uFyalMbd
gml3+JZBo+Bsfv73nuLU/TmXeufrWlhD5FAWrUrrQvve3nnud/j3srrfX0VfXDeS
kpzPZo98hoS3bL4wfTlguhZ+mf3blW4/AgMBAAGjggE6MIIBNjAfBgNVHSMEGDAW
gBSM9NmTCke8AKBKzkt1bqC2sLJ+/DAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMCsGA1UdEQQkMCKCIHNlY3VyZS5ncmVlbmxp
Z2h0aW5zdXJhbmNlLmNvLnVrMEEGA1UdHwQ6MDgwNqA0oDKGMGh0dHA6Ly9ndHNz
bGR2LWNybC5nZW90cnVzdC5jb20vY3Jscy9ndHNzbGR2LmNybDAdBgNVHQ4EFgQU
2diCEPKc/SmPdfprl+hMPOdFvCQwDAYDVR0TAQH/BAIwADBHBggrBgEFBQcBAQQ7
MDkwNwYIKwYBBQUHMAKGK2h0dHA6Ly9ndHNzbGR2LWFpYS5nZW90cnVzdC5jb20v
Z3Rzc2xkdi5jcnQwDQYJKoZIhvcNAQEFBQADggEBABOcRvY1tHvI3jDoyq6LxDe5
VUXykc8xZ2pZsvuQRdS5WF8xCZkR7XZ9+S4lSxcbF1k70wIwSkKT4qs/7RGIEbav
qGVNdaLdzUhmJHWZKlEk+sLreGjoQFndolOW1Y/szU4gCZwfuZlmk/D0zGI+l/Ha
BMkNfZo7lS5Q0aKHJHWYyalWF92h55+/5EARUEe1qjye9EPxv5evCtWmgLsxa/SP
z84uICAid9m3rbZujZhwBxZ9XJXu9fCsmGByijvbpgpMYDrlsJ3frnapQmkTLyNZ
EUlwyD+BbsHZ+mT1yu8M2gmV5AL6CkStjPgo8mLWGQQRUW+cAw3R5v5/x33Anag=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 197282
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-11-07 03:46:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-12-08 20:51:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rloEf2Rf3EEZlemJv-pUkLTmxEGqiMcb'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.greenlightinsurance.co.uk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT30613838'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)11'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R) Premium'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.greenlightinsurance.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 593675424041882129603922352007334515399922521672350473329356922688770430317871348551076403045200078385931957367595979751144245430172892007581097799482259409010918513023388300276547933549481849731049010634729705792838323989130974065390276791762281276604537301365490649130670354139102506690499991108652381913365778448627724485644288586854292779170089610864648763937909633996411053335197247687141755546344760667092458165318249640573267815468205642863105842608261382119816128877245722596282893898778627490186767794100753270694793813078606511721387131747681843067960057167516912680784632262167156831163955026259717521628278348515449352703770058227199164416535119852715494564098995943202318527606946558542385291086448871507918913968668523023181010738707726755815605459577887945632216554522659582206013038635931082732436252194755435094029836477982832686128295731250776875183468031378011841756100342037683001561299357504403706746864236798096294291021976629818747444847067944510435696148982110476232059910910067444290684527259772705073220515711283202168899090647572233865146694820798276310089091889731883011583573939744904099622918747331086935511546131046975008240019818677976388104551739816907545409869850328321793123427380613118769736543807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8cf4d9930a47bc00a04ace4b756ea0b6b0b27efc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.greenlightinsurance.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssldv-crl.geotrust.com/crls/gtssldv.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9d88210f29cfd298f75fa6b97e84c3ce745bc24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssldv-aia.geotrust.com/gtssldv.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00139c46f635b47bc8de30e8caae8bc437b95545f291cf31676a59b2fb9045d4b9585f31099911ed767df92e254b171b17593bd302304a4293e2ab3fed118811b6afa8654d75a2ddcd48662475992a5124fac2eb7868e84059dda25396d58feccd4e20099c1fb9996693f0f4cc623e97f1da04c90d7d9a3b952e50d1a287247598c9a95617dda1e79fbfe440115047b5aa3c9ef443f1bf97af0ad5a680bb316bf48fcfce2e20202277d9b7adb66e8d987007167d5c95eef5f0ac9860728a3bdba60a4c603ae5b09ddfae76a94269132f2359114970c83f816ec1d9fa64f5caef0cda0995e402fa0a44ad8cf828f262d6190411516f9c030dd1e6fe7fc77dc09da8