viridor.co.uk

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 07:f2:36:5d:b7:a3:ef:2b:84:96:35:ca:70:4e:84:9b was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=viridor.co.uk

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:f2:36:5d:b7:a3:ef:2b:84:96:35:ca:70:4e:84:9b
Serial Number (int): 10562234485431491567473934834716279963
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 17:ed:a0:f6:e2:a0:ad:b4:b1:8d:77:36:92:b9:70:41:cb:09:36:80
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): c6:7b:7c:f2:be:b1:c0:84:1e:f7:96:e6:62:56:ae:4a:c8:01:67:86
Fingerprint (sha256): e7:8a:dc:d9:41:ac:7b:2d:c1:a4:8b:7c:a9:03:80:3d:e9:1d:d9:b4:15:e6:89:76:74:4f:cb:04:3c:2c:4d:fa

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate viridor.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for viridor.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

viridor.co.uk

Other certificates including the domain name viridor.co.uk

(limited to 100 certificates)
blog.viridor.co.uk
vrd-swi-nas-01.viridor.co.uk
*.viridor.co.uk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
access.viridor.co.uk
sni.cloudflaressl.com
*.viridor.co.uk
sni.cloudflaressl.com
*.viridor.co.uk
remote.viridor.co.uk
*.viridor.co.uk
*.viridor.co.uk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.viridor.co.uk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
viridor.co.uk
sni.cloudflaressl.com
services.viridor.co.uk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.viridor.co.uk
www.viridor.co.uk
sni.cloudflaressl.com
access.viridor.co.uk
sni.cloudflaressl.com
*.viridor.co.uk
sni.cloudflaressl.com
sni.cloudflaressl.com
viridor.co.uk
itservicedesk.viridor.co.uk
sni.cloudflaressl.com
sni.cloudflaressl.com
viridor.co.uk
www.viridor.co.uk
sni.cloudflaressl.com
viridor.co.uk
services.viridor.co.uk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
portal.viridor.co.uk
sni.cloudflaressl.com
remote.viridor.co.uk
sni.cloudflaressl.com
viridor.co.uk
sni.cloudflaressl.com
sni.cloudflaressl.com
*.viridor.co.uk
*.viridor.co.uk
sni.cloudflaressl.com
sni.cloudflaressl.com
blog.viridor.co.uk
sni.cloudflaressl.com
sni.cloudflaressl.com
viridor.co.uk
access.viridor.co.uk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
viridor.co.uk
sni.cloudflaressl.com

Certificate

The complete raw certificate details for viridor.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtylRmxuIQEouUovACDdt
izGfg8cY6kqcJvjFlya0HMQjTDng6iNw9fcwoVdvtE03PxZ02tR577NloTUolOB+
I7RmyrtrnDeMYmni+FRA0Bna6HXGHrcP++tXWzy9aUJCcGLRsk91W2rcFqXMmV2G
utwhg9XWjAR2bVgS4TZrkHr1xSycl89MN1QdbaEZtAlgoPQL6RT0YY50KOeTlG/z
z34EekLhyZH6PLuIAnZdKShZQGeN2UM/+PdagCubnYoHK/q4xDQSfN7xnTINt8oS
hAvNQOlCZ6DAS2oOM0ChL6w8vM7B/8kooTotAuU9DmhynK82No4sAkw0Pw7s5sxl
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10562234485431491567473934834716279963
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'viridor.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23121984855145058709161792988119405591170983963096323779386912147036657777314940919297578833282015994702476294858970043630172269706372131368825831391179824669559632546269353490018235750285951927902969581332379275026156884901480306792670306264424925792402676917659352898992866640972456307859364610565471362485680657180706020082947033317524972582651664065055108035888994554519227589506549057614397635628681046945259532268726940829676666135336079095279957979207878518076087490238264374724028679916361237905167388270745219873147691413024249195583839851200339336691451451086917927908082809021665130738894926387246571218397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17eda0f6e2a0adb4b18d773692b97041cb093680
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viridor.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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