mazars.co.uk

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0d:36:fd:1c:c4:a3:ae:7b:c4:aa:2c:0a:9e:c3:9a:48 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mazars.co.uk

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:36:fd:1c:c4:a3:ae:7b:c4:aa:2c:0a:9e:c3:9a:48
Serial Number (int): 17565481704440002120178395870904162888
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 84:6c:a6:94:bf:23:8e:49:1a:e4:8c:88:ad:93:67:e4:d7:32:21:97
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 26:e8:ad:10:f2:3b:fa:71:37:fb:e1:53:f4:86:56:3e:5c:37:f7:26
Fingerprint (sha256): df:64:69:a5:40:73:19:ef:7f:d4:80:b0:6d:4d:f5:4c:69:6d:1a:31:4f:68:0c:ad:fc:a9:4c:fd:c3:02:e5:0a

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate mazars.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mazars.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mazars.co.uk

Other certificates including the domain name mazars.co.uk

(limited to 100 certificates)
mail.mazars.co.uk
forms.mazars.co.uk
*.mazars.co.uk
my.mazars.co.uk
www.mazars.nl
access01.mazars.co.uk
mail.mazars.co.uk
www.mazars.fr
graduates.mazars.co.uk
www.mazars.fr
pavpn.mazars.co.uk
investment.mazars.co.uk
schoolleavers.mazars.co.uk
*.mazars.co.uk
secure.mazars.co.uk
investment.mazars.co.uk
mail.mazars.co.uk
www.mazars.fr
investment.mazars.co.uk
mazars-proposals.co.uk
jobs.mazars.co.uk
www.mazars.fr
investment.mazars.co.uk
investment.mazars.co.uk
Citrix.mazars.co.uk
my.mazars.co.uk
secure.mazars.co.uk
mail.mazars.co.uk
mvd.mazars.co.uk
investment.mazars.co.uk
alumni.mazars.co.uk
access01.mazars.co.uk
Csg.mazars.co.uk
www.mazars.fr
graduates.mazars.co.uk
www.mazars.fr
*.mazars.co.uk
sftp.mazars.co.uk
investment.mazars.co.uk
webmail.mazars.co.uk
lyweb01.mazars.co.uk
*.mazars.co.uk
www.mazars.com
access01.mazars.co.uk
pavpn.mazars.co.uk
my.mazars.co.uk
access02.mazars.co.uk
www.mazars.fr
schoolleavers.mazars.co.uk
www.mazars.fr
mazars.co.uk
www.mazars.fr
*.mazars.co.uk
lyweb01.mazars.co.uk
access01.mazars.co.uk

Certificate

The complete raw certificate details for mazars.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEIM0/Rc+N7N4mdcMdww
VUkydjKYq9kuvmkdHeIO8WO1TskJBtuygEJDbBefEg3HKF9fCisZpryS4FiXfBvv
EclaI6ghUKXZGS5nv1oJOBEqbPaWwrdSUMmsywvAbhwDvmsH9eBnIA/NWkXQvmbr
axj5NxsSwzFPGWkgyH2HH/rP3MR3BzAmPZcPyMHKn9vUBZQUc2aX1TOflo8vNmDU
wRMn2tF4xre4PYw/NjrDRF+i42nFwEHh5cT8TXQbUhsOhtG1s5nPwYcC7V2Qd2Cb
Pg8/ID3c4qsd8FH9ceQumohfjSo9WF2lai3kvcH5uXdy+Pb07soWQPt9f0lnhsv0
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17565481704440002120178395870904162888
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mazars.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23260418636506358974324399237505934285793426761871166765607004755748825300006808018085699418817192391222432156257185614252560431540707518328124771619173660425702480871496840439646264210396451904406075648009598584310657870981811195549849213056899591181093648269042634914287736916888998150241720890966214837754747527157259011804373583073369975413063212359606094427333145087208073635491742290852102722445304529576227582392807695056438386444127284311478391377483838801376193448182503418997400026119058438458896085018784631945026423721408091783284253582836801272015210081865783323375757902469731838251348580908500008039429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							846ca694bf238e491ae48c88ad9367e4d7322197
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazars.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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