forum.cotford-st-luke.co.uk

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 70:d8:10:ea:9c:75:18:3b:6d:3e:e4:c9 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=forum.cotford-st-luke.co.uk,OU=Domain Control Validated,C=GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 70:d8:10:ea:9c:75:18:3b:6d:3e:e4:c9
Serial Number (int): 34923528962703190646977389769
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 47:b7:05:78:16:f7:67:7d:60:9b:d2:1a:e2:e6:84:e2:1f:30:89:7b
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 2e:b8:90:83:1b:eb:c9:5c:9d:bb:65:86:6b:7a:7f:32:a7:23:e2:dc
Fingerprint (sha256): cb:8f:6b:1a:72:9d:b4:5b:e4:00:f1:4c:32:11:bc:f6:44:d7:bb:0f:8b:fe:13:14:9a:68:f4:4e:3e:84:8d:a6

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate forum.cotford-st-luke.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for forum.cotford-st-luke.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forum.cotford-st-luke.co.uk

Other certificates including the domain name cotford-st-luke.co.uk

(limited to 100 certificates)
admin.cotford-st-luke.co.uk
confirm.cotford-st-luke.co.uk
childminder.cotford-st-luke.co.uk
childminder.cotford-st-luke.co.uk
cotford-st-luke.co.uk
multimapper.farr.me
cotford-st-luke.co.uk
forum.cotford-st-luke.co.uk
forum.cotford-st-luke.co.uk
forum.cotford-st-luke.co.uk
cotford-st-luke.co.uk
www.cotford-st-luke.farr.me
cotford-st-luke.co.uk
admin.cotford-st-luke.co.uk
admin.cotford-st-luke.co.uk
cotford-st-luke.co.uk
cotford-st-luke.co.uk
cotford-st-luke.co.uk
childminder.cotford-st-luke.co.uk
childminder.cotford-st-luke.co.uk
cotford-st-luke.co.uk
cotford-st-luke.co.uk
cotford-st-luke.co.uk
admin.cotford-st-luke.co.uk
confirm.cotford-st-luke.co.uk
cotford-st-luke.co.uk
cotford-st-luke.co.uk
forum.cotford-st-luke.co.uk
cotford-st-luke.co.uk
www.multimapper.farr.me
cotford-st-luke.co.uk
cotford-st-luke.co.uk
confirm.cotford-st-luke.co.uk
cotford-st-luke.co.uk
forum.cotford-st-luke.co.uk
cotford-st-luke.co.uk
bloob.uk
forum.cotford-st-luke.co.uk

Certificate

The complete raw certificate details for forum.cotford-st-luke.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2er2jypq5h4KgBpOh5W5
CJ177w/bbpCvLdCTDa716muJKFw6boCFWe7rz2hxuXh+WW487RxiGeJhEawAmK3E
EmGMdbCDT0+nxX410fACb3LDGIAZ45ifzJKFes6dOgrhE4b/gUGv0Ut3NcNyuh+B
xmv8lvwvoJiXRTTcFIKCkAvkSLXd12/Tv+2vss2S+11E/TcoIcg2YH7irzy9OzSy
t3dRKA46xsyz6hjCXfileFguAYojk+lf+Twpi8KQkxVnlAxPSQUmfjOmTs2/ZSzY
zGaCnwoczZugL/VGsMkbgq+dB4JZhlzeBSE/zn50smmp47BC8xRzXKP8B1S67dI2
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 34923528962703190646977389769
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-09 09:15:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-10 09:15:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'forum.cotford-st-luke.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27509576811444278736292400138682771804468235147411569664025202151735583349996521518904221000821503567317997374217000636753928218622669160487201171915374371598075584092504938259199274224221661603062533549065551196997402315536594047141536558650440739133418715393869738119565553865679766137319611624679771306117499143112558710409762795658132351898282340742961251444731821537698045048742540079748748897552696350681239033040610156112423726692569381011379284372710708640253053116534310909407383548120838168149012531861638721432973187922186576885729139556083389159181402117564627200135494162314739362106873647781987243669091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.cotford-st-luke.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47b7057816f7677d609bd21ae2e684e21f30897b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (608 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0013bc16e3a3eddb206202a9f4d0f11c081ea7af2bcf61e4f0599ff4b251890f45f7f6c3a85f5f5934fe4b89485d93d99281a2f82fc4dcfee643b97959ccfaf348e5c193190547aa5344c7bb64cc8e54efa8f83261bb31ab37f18e6506958771588b2a60f7a5a4679c31e16d8aaabeb352cf56a19dfd91dcb2429111dcb5c44b99b6269cf7fbd6589524d48ed27ed5d4ac75ecd1f5f94c9de8061aaabdc65a809a26296c3528fa94c59c94017f6d415a9ff8b924b9ba5a0b54b9b33b6924bb4555997df96d5b692b502ccf3eae35e049826d98f169cd57e6f1b4e4ed7e971981b1f59dae5c7f43daab32a63f366b1439b8751cb011b838f27eae8bc455b8a3052c