*.innovateuk.org

- Innovate UK -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0c:ce:ee:84:6f:b0:94:56:64:bb:56:48:87:47:d6:6d was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Innovate UK

Organization: Innovate UK
Locality: Swindon
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:ce:ee:84:6f:b0:94:56:64:bb:56:48:87:47:d6:6d
Serial Number (int): 17025186808446593485115851264447993453
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8a:1e:35:ef:c7:f3:7d:fb:88:b3:75:82:b5:16:6c:a9:40:c8:47:94
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 58:dc:71:7e:88:a2:63:fa:ad:cb:ea:9d:39:8c:6e:7a:db:55:da:34
Fingerprint (sha256): c9:5b:4c:bb:5c:03:13:4b:f3:cc:8a:fc:87:45:63:c9:a8:2c:81:60:1a:6c:c1:c0:01:56:0b:39:98:02:92:9b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate *.innovateuk.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.innovateuk.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.innovateuk.org
innovateuk.org

Other certificates including the domain name innovateuk.org

(limited to 100 certificates)
datavis.innovateuk.org
*.innovateuk.org
datavistest.innovateuk.org
*.innovateuk.org
datavistest.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
app.info.innovateuk.org
*.innovateuk.org
*.innovateuk.org
aem.devops.innovateuk.org
reports.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
aec.devops.innovateuk.org
*.innovateuk.org
datavis.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
datavistest.innovateuk.org
datavis.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
aec.devops.innovateuk.org
aem.devops.innovateuk.org
*.innovateuk.org
datavis.innovateuk.org
*.innovateuk.org
*.innovateuk.org
reports.innovateuk.org
*.innovateuk.org
*.innovateuk.org
engage.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
images.info.innovateuk.org
datavis.innovateuk.org
*.innovateuk.org
datavis.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
datavis.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
app.info.innovateuk.org
*.innovateuk.org
*.innovateuk.org
*.innovateuk.org
datavistest.innovateuk.org
*.innovateuk.org
*.innovateuk.org
govboard.innovateuk.org

Certificate

The complete raw certificate details for *.innovateuk.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17025186808446593485115851264447993453
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swindon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Innovate UK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.innovateuk.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779389849445388933747268598784978141231320539879947699736351637912941237065515491733934116918712016789463689838420183126316263009599273352502504370499174262864302934889859182740518886471804511212798112505260841533291256428804794559897004260912433609296448704655376235641706420457724873727782261870622951611759382131330786242309118791016492764591270039418951603108946216698898659687122351797088827574823134612971067608887317656833641433111250229259080686769579576615823981822765667041399217454272531240504691056746467848727427927348033342460112420863902512181458992098566452840720807481924933866539309070867397801056465122681703313966915496297020788462135696831316406326882140446295810343654179682434780509980034351326128476222124727731239237637101249772086702492730168051945386630084850701905458417315168509583168795802491114255019809009211049559263279763768270413545514152190681536244422395345906552478866711787060322652933828488405097147041164822618452623338134746624086338240330223165199485215374839042784766906681794617191735222937398754942121172717422066104359073929711002280230067004253991650457016521780687803907386847484071966660165678982533792536776797729397366986403023072968363384642967113912160220615786515741296438663301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a1e35efc7f37dfb88b37582b5166ca940c84794
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innovateuk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovateuk.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016b278915a0000004030047304502205eaab0c29108e82c5d1529ee77e43b8058254256741fea441a9f049174d97bf3022100bf8185d248f83a76672d1c633c7a9e096cba5c21500c4f73782ecd3ccedb89760077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016b2789168e0000040300483046022100bc5a19395a5c45e03b2e5c6b849dcc49b95697683c2c98c691ee163bd8c29f2d02210092b4891b040ead73a89c604156775c8a51811dd0c1bb33d2959302a5feda4e64
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006e4da12773927255e3141afb7594c85c01145d95f6db612eb2fa23ee9cc0d1e9833fd16aeb792448420fd5aa71cecf7b1f849bb06a099d0bda6bfbd24e2bf214d72eef8dbf28b2ce99ec943f31119709e158e17907e15e7830a40c51f9055cb6fe3a6acc61011a145d31b07756a53a59ca090091117650ffaeec5cf98ee182bccf9e57048e0ea655303beb494c92224e2658f0ea481ebe64b03cc174590e9217838256d2b8c5caf723b2acfee74ad8daf50ba24b60aae4b524513b9f262bab7b03fb38e48028aa7fabac63b37e486b48dc80e8c0c8ab968971b7f86ee9161c489efcec249fa97bacf94e8318a02b9912c8f39d3e734a103e79f43b47475b1e1b