danesmoorgroup.co.uk

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:f5:a9:9e:21:0a:c9:a3:5b:a5:95:4a:31:00:be:d0 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=danesmoorgroup.co.uk

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:f5:a9:9e:21:0a:c9:a3:5b:a5:95:4a:31:00:be:d0
Serial Number (int): 14567832943688932675481752016374513360
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1c:0f:46:2a:ea:b5:42:c9:75:cf:1c:95:04:7b:6c:af:49:91:4e:6b
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 6c:21:22:ca:ce:1f:24:82:7d:27:7a:d0:5d:e9:e9:93:ac:83:5b:91
Fingerprint (sha256): cd:de:a1:75:03:a2:74:1a:c5:37:e1:8a:6d:4c:6e:09:96:02:b6:b2:8c:a3:ec:78:08:08:d4:7e:a5:50:bb:0a

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate danesmoorgroup.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for danesmoorgroup.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

danesmoorgroup.co.uk

Other certificates including the domain name danesmoorgroup.co.uk

(limited to 100 certificates)
mail.danesmoorgroup.co.uk
skypewebext.danesmoorgroup.co.uk
mail.danesmoorgroup.co.uk
login.danesmoorgroup.co.uk
danesmoorgroup.co.uk
mail.danesmoorgroup.co.uk
login.danesmoorgroup.co.uk
skypewebext.danesmoorgroup.co.uk
danesmoorgroup.co.uk
skypeaccess.danesmoorgroup.co.uk
skypeaccess.danesmoorgroup.co.uk
danesmoorgroup.co.uk
mail.danesmoorgroup.co.uk

Certificate

The complete raw certificate details for danesmoorgroup.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte0OOujS9DW9P0CfSKhm
inF+DBvVqig3Xb3ijxoNG3Gx+rL4HHLLGc6h7c3H/0zsAbWZVKAdBTgYvFY5iHXI
VBxD88mW8NpstIV+WPqOzl0Bn1obpXBaGPD1P7hjcCABisRWnq9lFVzX5JSnnBG3
ihUgwmOi9T2RqaGRA4geRJrZUgzDxEHe4A9eWYiyp/vPv3q2ZebLEQKxHDTtTjbH
1pfuoRlfI7hErH2gaRH04Z6yMAS5Fh8AknuMRh/V+lySY6ngsz5pvQ3cL00byOw+
2N8dpO18LJEtZ3Mqt/tgKxMEC/T7LQ8B/nBfHzSmSs52xvsoycswLg2XhhEq6qIE
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14567832943688932675481752016374513360
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'danesmoorgroup.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22966029665295087693556148322954505786021597108781696481098616342860612173341819561117306152992549774960858193949537419929150120957419170853219394868465876095005144104261789727399296545606087706964007084906069008500916518870490909782463140093359764684372810007957529740729079300212243123474461563671729969178446119760053020978505046719128746133189172155351528830900120541484350601956297431893149808046855031301524592977330528154467688465477713834928204245229015420995208055864663981139613911868104360232992207113857503928777786374829712216566920787701076574252663248415074229552592345238881953816305223736265113994317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c0f462aeab542c975cf1c95047b6caf49914e6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danesmoorgroup.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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