www.sandlizard.co.uk
Issued by AlphaSSL CA - SHA256 - G2
About this certificate
This digital certificate with serial number 79:e0:a6:d0:c6:ee:ae:fc:62:2e:e6:3d was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.sandlizard.co.uk,OU=Domain Control Validated
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 79:e0:a6:d0:c6:ee:ae:fc:62:2e:e6:3dSerial Number (int): 37719273336069941006494000701
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 1d:54:b2:91:40:ab:89:75:ec:4e:a6:3a:f9:ab:58:19:11:3d:1e:7a
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7
Fingerprint (sha1): 35:9f:42:68:d7:aa:3f:46:68:b1:91:65:73:78:62:cb:b8:da:5d:8f
Fingerprint (sha256): f1:5f:0e:65:82:36:4d:ef:06:fb:f1:f3:d4:a6:71:95:60:1d:b7:f1:6b:93:63:80:62:1c:b9:51:c4:ab:ad:83
Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl
Check the revocation status for certificate www.sandlizard.co.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.sandlizard.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.sandlizard.co.uk
sandlizard.co.uk
sandlizard.co.uk
Other certificates including the domain name sandlizard.co.uk
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.sandlizard.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHXTCCBkWgAwIBAgIMeeCm0MburvxiLuY9MA0GCSqGSIb3DQEBCwUAMEwxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTE2MDkxNjE0NDEzOFoXDTE4MTAy MzE2MTAyM1owQjEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkMR0w GwYDVQQDExR3d3cuc2FuZGxpemFyZC5jby51azCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALwP/Y3GW1+ANj8Gil1NJPYThrIAZ2D8i6T0IelwRjEFsmZY 80GpLI+nWaSSNoe1sXCAW69aANlxGHBDPImoAk4WC36fB29nuP0wbMNC3wl28fyy r1i2tVLXArErzYlIJVBI9sMvyFHSX4EaXw88jy94ITFiSckLlrbYh2Qbpd6/5QGE ByCi8GBQqApKqxB91BFIzD5a+5s4J+0i15hftkPnL7VY2qlOaxQl7AGi43AG1QdK QPgtcwReRS7dKZovSQaDaUo0MTSQUwnYCDplJG875+AW12LUPoEHhtdvIcmq+ZMI L3JxcgIHDBtcEjoBhS1PuksLELW+8m4j+ehzOtcCAwEAAaOCBEcwggRDMA4GA1Ud DwEB/wQEAwIFoDCBiQYIKwYBBQUHAQEEfTB7MEIGCCsGAQUFBzAChjZodHRwOi8v c2VjdXJlMi5hbHBoYXNzbC5jb20vY2FjZXJ0L2dzYWxwaGFzaGEyZzJyMS5jcnQw NQYIKwYBBQUHMAGGKWh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9nc2FscGhh c2hhMmcyMFcGA1UdIARQME4wQgYKKwYBBAGgMgEKCjA0MDIGCCsGAQUFBwIBFiZo dHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEw CQYDVR0TBAIwADA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY3JsMi5hbHBoYXNz bC5jb20vZ3MvZ3NhbHBoYXNoYTJnMi5jcmwwMQYDVR0RBCowKIIUd3d3LnNhbmRs aXphcmQuY28udWuCEHNhbmRsaXphcmQuY28udWswHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMB0GA1UdDgQWBBQdVLKRQKuJdexOpjr5q1gZET0eejAfBgNV HSMEGDAWgBT1zdU8CFD5ak86t5faVoPmadJo9zCCAm0GCisGAQQB1nkCBAIEggJd BIICWQJXAHYAaPaY+B9kgr46jO65KB1M/HFRXWeT1ETRCmesu09P+8QAAAFXM3Ik XwAABAMARzBFAiA8IApgLy2JXQlBjuEtDhPZ2CkkF8d2SdfWzBEZNvflJgIhAIxZ eiX7HeGMe6CTurtPNI1vxJt8TPtnGN51iv/U6gQEAHUApLkJkLQYWBSHuxOizGdw Cjw1mAT5G9+443fNDsgN3BAAAAFXM3Ip+gAABAMARjBEAiBbTiSrhodyAiQDJGfQ ZxGPVhe8XVi5bMQZzjLMuO7mrAIgJpvCM7eksv4wJ8aU2dnVbjEydwo6fCSoJOK9 1Ify1bwAdgDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAVczcjMD AAAEAwBHMEUCIQD41j7Hm+4hnUAf84XQeRn30PVfRkH0LND8cvI1HwTAFQIgRJU7 MqzzD0BGrExepnDBwjL1wPOBKjnYSP41+umsbiYAdgDd6x0reg1PpiCLga2BaHB+ Lo6dAdVciI09EcTNtuy+zAAAAVczcjeKAAAEAwBHMEUCIEiXsDjuJ6c7LFKioYTc J1i+smmE0xj+Ym+WgXdzuPhKAiEAmZjoWPZP2ex/06IkV3jLJ9DCiAkP8gCZuUZJ nmndBzgAdgBWFAaaL9fC7NP14b1Esj7HRna5vJkRXMDvlJhV1onQ3QAAAVczcjvV AAAEAwBHMEUCIQDlD1eFRCYQcZt34DjkAYCsLIBJFAEst4kKhYqCaEzbpAIgFDtT 9+wfFubvV2vfRTSGQzcxuERhqDoDMr65pJToEKswDQYJKoZIhvcNAQELBQADggEB AFLXucUN8qHolESFJQpBpodeXbHGrOnqcizuxU1p43uQIkm3fneqaIW3k44TpvDs RwW+NIv5CU6mtlypvHZCjiYzdh7WOTaAEQLZpxYymCA5r11No2a/g+D1qne+eq9l kk+62yW/dw5a6SQqX8Y9VRIUWCiVQ1I90OhAqtv+ibv1LfSMUsImNg+0T5xhJYd+ JE1ui4tFKLOirrqprA6SCx8pjeGqaUU+lBH1rKkYrsxOVlqjfMFweZmRZtk12nQ3 P3YWVsk8EEdyv3GruJG2Xq9bJ4wx9wQNcYy+GhOLbLaozMyXvbjWDdIj8gkyy5Cu boTp9BlbvG1wAwr66j1jM4c= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA/9jcZbX4A2PwaKXU0k 9hOGsgBnYPyLpPQh6XBGMQWyZljzQaksj6dZpJI2h7WxcIBbr1oA2XEYcEM8iagC ThYLfp8Hb2e4/TBsw0LfCXbx/LKvWLa1UtcCsSvNiUglUEj2wy/IUdJfgRpfDzyP L3ghMWJJyQuWttiHZBul3r/lAYQHIKLwYFCoCkqrEH3UEUjMPlr7mzgn7SLXmF+2 Q+cvtVjaqU5rFCXsAaLjcAbVB0pA+C1zBF5FLt0pmi9JBoNpSjQxNJBTCdgIOmUk bzvn4BbXYtQ+gQeG128hyar5kwgvcnFyAgcMG1wSOgGFLU+6SwsQtb7ybiP56HM6 1wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 37719273336069941006494000701 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-16 14:41:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-23 16:10:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sandlizard.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23740686515717428846470184895029808694515480120080043918057195652401587006399491137481139688442593837961671525258982238562710111890357978211867204128675659532636606054803902228055152040306300243917107525150726866505915432665591953819613180206015477292481393349420020522273877242925873402026822680071394329290319428727168185409325601995239500153790158599292525920009296529214179541056214876636405695050416736980115493359994632799441584047105223877149971681137821153081268513056909530396130887011619395409889291674312778531303208856442492788877437229753415509073420318503682568554403413621036795384561823021180919167703 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandlizard.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandlizard.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1d54b29140ab8975ec4ea63af9ab5819113d1e7a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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