eddi.nhs.uk

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0d:13:58:9d:64:40:ae:5d:4e:31:72:95:1f:b7:e4:86 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eddi.nhs.uk

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:13:58:9d:64:40:ae:5d:4e:31:72:95:1f:b7:e4:86
Serial Number (int): 17380414907409399806729352664952857734
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 14:22:7f:10:3d:e7:df:d2:a4:5a:ca:c2:84:d2:f9:c5:90:fd:06:f8
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 4d:1b:77:10:8f:4e:41:42:ba:02:0e:de:b1:22:69:74:f3:7a:bd:ad
Fingerprint (sha256): d8:dd:b0:1f:ef:d3:e2:c3:a3:4e:e7:ab:90:81:d3:0f:4c:52:c8:08:ab:fa:56:92:e1:8e:1f:2f:e0:98:7f:9a

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate eddi.nhs.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eddi.nhs.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eddi.nhs.uk
www.eddi.nhs.uk

Other certificates including the domain name eddi.nhs.uk

(limited to 100 certificates)
api.common.eddi.nhs.uk
common.eddi.nhs.uk
api.ian.eddi.nhs.uk
eddi.nhs.uk
ian.eddi.nhs.uk
eddi.nhs.uk
pgadmin.common.eddi.nhs.uk

Certificate

The complete raw certificate details for eddi.nhs.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIQDRNYnWRArl1OMXKVH7fkhjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMDIyODAwMDAwMFoXDTIzMDkyMDIzNTk1OVowFjEU
MBIGA1UEAxMLZWRkaS5uaHMudWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/J12YrAPI5Ay2vIOJmEm7cuPsizKz3ObjsxqnZtlPULmXmlcFTTXm8ECT
84E7WFd6CfXJgTrnSbaA5Sxsy2omnapGThve3RQ37wdrIPT6YzYUxppEEvOl5ggo
nCT1oaQUCVRs9z5cg+gOlhH+wNqRWMhbQjiwdYBrFsnxuEMJqCSv1eFTfvYSF2ea
0JWcBNRN+I+shNqcGqHu7pXBgxdk/BRkZPKaJdGYQPRsRSq/UskZXt+1gEXsHkc7
Z77GFZVCQpzRoniK0GwRRRz0ddCQMxEJMgpGFjsuvvgk1Y+idWeJkHtKqRuH9Bu+
eScuYxukluB5eA0ns+ZwVuWrNWn9AgMBAAGjggLzMIIC7zAfBgNVHSMEGDAWgBTA
MVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUFCJ/ED3n39KkWsrChNL5xZD9
BvgwJwYDVR0RBCAwHoILZWRkaS5uaHMudWuCD3d3dy5lZGRpLm5ocy51azAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1Ud
HwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3Iy
bTAyLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYI
KwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2Bggr
BgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIu
Y2VyMAwGA1UdEwEB/wQCMAAwggF8BgorBgEEAdZ5AgQCBIIBbASCAWgBZgB1AOg+
0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABhppzkxMAAAQDAEYwRAIg
Qp+us/skjCvFDaQnE3gyt9rr3H9ofqSfaHp0Jch6SO0CIFYVGiiqbZ9GTxCxMOyA
FWRZ0AaJUKbkBAFkZ/zyarqvAHUAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PAD
Dnk2pZoAAAGGmnOTJgAABAMARjBEAiAtr1e7KJQYtGZI5tnUbY7I4mKBnIGp/tnR
JQjcpjlmfAIgZRNwwE+m4xr8w0XqDcYWmnGdPhBAKnKMliYLWSdstcQAdgC3Pvsk
35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYaac5L1AAAEAwBHMEUCIQCn
nowl4y5nbGhW8RbSNdUspfXc40Cw/5rLcWUoKg2+8QIgAWv2+/ezBZcPPNyNsZtt
vXiCdXOQdrbneRDpnBNn5a4wDQYJKoZIhvcNAQELBQADggEBACBF5kMSA0MdhR3o
+2FuurLbefROTlC5DwG1JGNYuq6/nK5j8S7GIYLMAv5GRe/oBj4egiTVgvhUodNe
iyxGRlOzLlEmGS4XexCbaZlbXIBaIg7Vnt/vC6f36v9v57b7N9ElUv3kTeNm/73s
6TULbqCHRoojSFYVoRDSGk/3D420fBziVNnN69kXnduMXu1fakNJA7iEFM7w1qUI
GNv/y9Bl0EK6GDJ0UjuziHdRlH+JE63nr+okNSk2SD5r56luiegiZqMrgeOX4VDK
AR2ong4/TqJi7g3MQcTPqQUmUPb4iej0XoPthQdQ8hsQ3oi6AlcB2OyKd4F6sX2S
eiQTNR8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyddmKwDyOQMtryDiZhJ
u3Lj7Isys9zm47Map2bZT1C5l5pXBU015vBAk/OBO1hXegn1yYE650m2gOUsbMtq
Jp2qRk4b3t0UN+8HayD0+mM2FMaaRBLzpeYIKJwk9aGkFAlUbPc+XIPoDpYR/sDa
kVjIW0I4sHWAaxbJ8bhDCagkr9XhU372EhdnmtCVnATUTfiPrITanBqh7u6VwYMX
ZPwUZGTymiXRmED0bEUqv1LJGV7ftYBF7B5HO2e+xhWVQkKc0aJ4itBsEUUc9HXQ
kDMRCTIKRhY7Lr74JNWPonVniZB7Sqkbh/QbvnknLmMbpJbgeXgNJ7PmcFblqzVp
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17380414907409399806729352664952857734
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eddi.nhs.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24130928154713469662909437639470441810311687911046065980651905176656410585442377468133631944622242304565315253749165355099983884947936091374018149789164910663281252077675201717902276679918953891677906892173339934239223994892055831420253698982975494220959947797036454622546737663924406808574408754525775112196275303734159940493617845785410309878080334979388059246178877527838887978347906329135706452276187170536107004630818445777608450637509758245503912982733685275892862146011098368761210721409326153016336876221373318457783468459448232850534545016963818540796988589981968293436257590416664146838769805809263675009533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14227f103de7dfd2a45acac284d2f9c590fd06f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eddi.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eddi.nhs.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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