lal.org.uk

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 8b:78:fb:7f:d7:09:fd:e4:0e:b4:e4:f5:da:66:61:4e was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lal.org.uk

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 8b:78:fb:7f:d7:09:fd:e4:0e:b4:e4:f5:da:66:61:4e
Serial Number (int): 185390868050465997939503385899967078734
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: b4:a6:12:3e:84:16:11:2d:53:c0:44:65:f9:00:2f:8a:4f:bf:f1:0e
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): f4:ee:1c:d2:42:9d:ed:67:2a:da:19:f9:5e:13:da:69:2e:07:73:4c
Fingerprint (sha256): cf:c6:33:7a:5e:c1:e6:4f:81:d3:fe:db:e5:c7:6a:e5:81:3b:5b:d3:b7:89:4e:4c:84:f8:90:36:25:66:a4:69

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/LTkNu2n9xSQ
CRL Distribution Point: http://crls.pki.goog/gts1p5/9gwVtkNuves.crl

Check the revocation status for certificate lal.org.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lal.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lal.org.uk
*.lal.org.uk

Other certificates including the domain name lal.org.uk

(limited to 100 certificates)
lal.org.uk
lal.org.uk
lal.org.uk
lal.org.uk
lal.org.uk
lal.org.uk
mkt.lal.org.uk
lal.org.uk
lal.org.uk
lal.org.uk
mkt.contek.pt
staging.lal.org.uk
lal.org.uk
lal.org.uk
lal.org.uk
lal.org.uk

Certificate

The complete raw certificate details for lal.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TKXwhpb0SiG0+XGyT6p
0VhQHIGEVQqwYhfhRIZkpahS5wfLMvQsbahO4h7JnZecPzXhrp5hKejbJ5uTjD+6
wrRaQY4eIYnjqUdHweTqIONvxZOi+bdZT9HD4c75XufGlumsKe4jrnHvuEMkclMP
33HekY2+4qP9YkN02ayXI+QzyXwpklxfGR9ppToNgdNAeXce2XTech65WC3R4moB
aIyOSK3oS2cIz5FGQeQzz1MazxHWHTsTfO9FeycsIl7fQpcyan5ibMt1zNCQyYOv
UxygOprBcYOiWAapsrgNkTbFdSlzQpw+m9rAd4+iPzmuESyEEPyllZ0o4z+MN51D
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 185390868050465997939503385899967078734
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-11 23:39:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 23:39:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lal.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29438473299330338640831556541969210020518753164224432457469379194519970044207588941264885655660437355215385625921966391309507390551217078088814835722299682277106784166180303827504412479591779912880107523567769820452226587924137425896858228963951325432379580636548827519439470584386348270990069673714378391074812934415201968584646088724969566692724428098874921726395074968146985417846367542129914668722118567444064693866408842303735101137689076586382533416315997649990521856856035400323079167989596865327855114986339325167438188938079955168481186328857782764620991478216295483966907841141374415260297850511168217367361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4a6123e8416112d53c04465f9002f8a4fbff10e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/LTkNu2n9xSQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lal.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lal.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/9gwVtkNuves.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189e72f214e0000040300473045022062f622e3b914c24f2fe0dc96a4d764a4613adfff5fa24e29e669a530830c7903022100beb23c858fcc08dba679f906caa7656ca63b42d7e177211abfcddbf9e5f8db9a007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189e72f215f0000040300483046022100c3529a3469d4e58e14bb5c8c003788c8d94971240faeae32c3ea8499691909d2022100b9cef32a2fdf4c188cb642f4fe51f4c4894f3332788a2969906b14d9ba42ae4e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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