www.lawgazette.co.uk

- The Law Society -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 70:3f:4d:50:42:81:80:d9:2a:63:a6:7b:b9:43:80:c8 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

The Law Society

Organization: The Law Society
Organization unit: The Law Society
State / Province: London
Locality: London
Country: GB

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 70:3f:4d:50:42:81:80:d9:2a:63:a6:7b:b9:43:80:c8
Serial Number (int): 149202218334373324773440264473543934152
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): f5:a4:0f:d0:41:58:d1:81:cd:68:88:f7:df:dc:ca:17:18:52:e8:c1
Fingerprint (sha256): c9:77:d0:1a:83:73:13:d6:d1:58:5f:92:98:41:97:ef:5e:3b:7b:ca:ad:98:d9:36:12:e4:be:9f:a5:34:9c:06

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.lawgazette.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lawgazette.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lawgazette.co.uk
lawgazette.co.uk

Other certificates including the domain name lawgazette.co.uk

(limited to 100 certificates)
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
adtest.abasoft.co.uk
adfe1.abacusemedia.com
jobs.lawgazette.co.uk
adfe1.abacusemedia.com
adnoncentaur.abasoft.co.uk
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
adfe1.abasoft.co.uk
adnoncentaur.abasoft.co.uk
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
adtest.abasoft.co.uk
wvfe2.webvisioncloud.com
adnoncentaur.abasoft.co.uk
www.lawgazette.co.uk
wvfe2.webvisioncloud.com
adtest.abasoft.co.uk
adfe1.abacusemedia.com
wvfe1.webvisioncloud.com
wvfe2.webvisioncloud.com
adfrontend2.abasoft.co.uk
jobs.lawgazette.co.uk
adfe1.abacusemedia.com
www.lawgazette.co.uk
www.lawgazette.co.uk
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
adtest.abasoft.co.uk
wvfe2.webvisioncloud.com
www.lawgazette.co.uk
adtest.abasoft.co.uk
wvfe2.webvisioncloud.com
jobs.lawgazette.co.uk
wvfe2.webvisioncloud.com
adnoncentaur.abasoft.co.uk
www.lawgazette.co.uk
adfe1.abasoft.co.uk
wvfe2.webvisioncloud.com
adfrontend2.abasoft.co.uk
jobs.lawgazette.co.uk
adnoncentaur.abasoft.co.uk
wvfe2.webvisioncloud.com
jobs.lawgazette.co.uk
adfrontend2.abasoft.co.uk
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
www.lawgazette.co.uk
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
www.lawgazette.co.uk
www.lawgazette.co.uk
wvfe2.webvisioncloud.com
adfrontend2.abasoft.co.uk
www.lawgazette.co.uk
wvfe2.webvisioncloud.com
adnoncentaur.abasoft.co.uk
wvfe2.webvisioncloud.com
www.lawgazette.co.uk
wvfe2.webvisioncloud.com
adfe1.abasoft.co.uk
adnoncentaur.abasoft.co.uk
*.jobs.lawgazette.co.uk
wvfe1.webvisioncloud.com
*.jobs.lawgazette.co.uk
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
adfe1.abacusemedia.com

Certificate

The complete raw certificate details for www.lawgazette.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sUMahZOsAUhbDhAly2/
InTXRh0TrU0OXAECdpqV4+PyzTc2HYpVYBmxCOK0Ic/+lL5uyUkcKoS0s0+nE/Gy
cqytcsytm6CBjHbOJr4VfoUK6fTlunQVVBgxwjLTA0zbvQ4cD7MRUOj7cw9+dSqT
8Qk86MbNYgLbbr6+8VyjH+vQVUSTYC0FhxQRnE6qfAfKfRc5jtg29zKHbGQ0maYR
O+Ev8YIHUOy4nREKYQifQmuquLP2uxRcYfPPWGP0OWgDLxim2zOZRB7MtVfFZoWr
tc87iVn3DxZxPHD+DgmVraMVMAaIlONFXj7OeGNnFItc9yvYQuQgqX0i6Votp8VH
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 149202218334373324773440264473543934152
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'The Law Society'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'The Law Society'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.lawgazette.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26607212276655657963358773926597681801264043881980012549124707175075412371015240028003510184685744330800982391641525092009181172292256987448006841502817967205698273019421654289134352496517093627435776695476718167551538546073892793095164850625555388581969399049373475113016990387123235114898553848028362737713419267739216276022867831315485937496192452879451915684687263889532156610475639034080077142550543653475204308628607143825054375589046761400677668973464099502861645418705907644940322808233682853988204097479364654676100775896969058364188964974799209583150743631827328998841187333079329142655772825920781011994417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lawgazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawgazette.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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