repayment.tax-hmrcustoms.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:27:94:ff:75:cc:4f:fa:ee:3a:72:8b:ac:58:e1:da:ba:0e was issued on by Let's Encrypt.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

repayment.tax-hmrcustoms.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 03:27:94:ff:75:cc:4f:fa:ee:3a:72:8b:ac:58:e1:da:ba:0e
Serial Number (int): 274805922273501655397565889267047237073422
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7b:50:70:9e:f5:e1:2a:2b:e0:c0:c9:41:65:f8:56:88:ae:5d:ef:43
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 28:6f:d8:2d:7f:df:c9:41:8c:37:37:db:15:66:58:0e:85:af:76:e0
Fingerprint (sha256): 00:0c:6b:16:57:b2:07:8d:ed:6a:46:34:0d:14:04:63:66:eb:39:fc:d1:c8:23:d5:1f:b4:3c:86:cd:8d:e8:2b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate repayment.tax-hmrcustoms.co.uk

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for repayment.tax-hmrcustoms.co.uk


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

claim.hmrc-gov.website
claim.hmrc-government.site
claim.tax-hmrcustoms.co.uk
claims.hmrc-gov.website
claims.hmrc-government.site
claims.tax-hmrcustoms.co.uk
eclaim.hmrc-gov.website
eclaim.hmrc-government.site
egov.hmrc-gov.website
gov.hmrc-government.site
gov.tax-hmrcustoms.co.uk
id.hmrc-gov.website
id.hmrc-government.site
login.hmrc-gov.website
mygov.hmrc-gov.website
mygov.tax-hmrcustoms.co.uk
myinfo.hmrc-government.site
personal.hmrc-gov.website
personal.hmrc-government.site
personal.tax-hmrcustoms.co.uk
personals.hmrc-gov.website
personals.hmrc-government.site
refund.hmrc-gov.website
refund.hmrc-government.site
refund.tax-hmrcustoms.co.uk
refunds.hmrc-gov.website
refunds.hmrc-government.site
refunds.tax-hmrcustoms.co.uk
repayment.hmrc-gov.website
repayment.tax-hmrcustoms.co.uk
support.hmrc-government.site
tax.hmrc-gov.website
tax.hmrc-government.site
taxs.hmrc-gov.website
taxs.hmrc-government.site
update.hmrc-government.site
verify.hmrc-gov.website
verify.hmrc-government.site
verify.tax-hmrcustoms.co.uk

Certificate

The complete raw certificate details for repayment.tax-hmrcustoms.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUXKDp1QHq3uUMy3zB21
HmRln9pFc/fjKx4raznsPEy2zrxJaf1Rwi1pojGB7ul8T7OhP6mq/3r+6d9cHCnp
yUZUdapb5dv/DVO2z9POodXMBj4m4w6CK361QhkLVg4iTYoTH3+gDsGfhAl9kK4X
AJJTTIePg4pKDWa9J8ZlOaG+HGv8T78u3T7ZsuxQ1frW4gtc6N4aBYeoJcLUJaKN
rf8S+R+h/x3MD5s57ENuT9QkOSbOJkNgGkpG3OthUPaznSeDLsNTVv2xVblup2+I
7/zLOJH9AvgV25bWFs4zEop7oqUx2h/9vTPBl4wGjgk0vvzLnTnwQi64eYk2GnDn
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274805922273501655397565889267047237073422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-14 08:56:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-14 08:56:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'repayment.tax-hmrcustoms.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23388500798042195442974906045542819098044051969468301844107825471209177412925494928750476663716423587137567379077793124112231699174208371203905853278100959542239839686312711586333122366194146566100410418603672340590259261509699627605649896768607232818696220163274224151744022756595040914660670427338005763876451953548899528500111261522748081195457468580858760957623216184703826437569959498146136225989290438943589446116950630265772894760769729214177782156749285850127436513428191191362722676145267872820813727445068838809713933669440175504341358726145293174515084945316200244484321668515525943195230868544309169284947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b50709ef5e12a2be0c0c94165f85688ae5def43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1065 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claim.hmrc-gov.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claim.hmrc-government.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claim.tax-hmrcustoms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims.hmrc-gov.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims.hmrc-government.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims.tax-hmrcustoms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclaim.hmrc-gov.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclaim.hmrc-government.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egov.hmrc-gov.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gov.hmrc-government.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gov.tax-hmrcustoms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.hmrc-gov.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.hmrc-government.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hmrc-gov.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygov.hmrc-gov.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygov.tax-hmrcustoms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinfo.hmrc-government.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal.hmrc-gov.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal.hmrc-government.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal.tax-hmrcustoms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personals.hmrc-gov.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personals.hmrc-government.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refund.hmrc-gov.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refund.hmrc-government.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refund.tax-hmrcustoms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refunds.hmrc-gov.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refunds.hmrc-government.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refunds.tax-hmrcustoms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repayment.hmrc-gov.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repayment.tax-hmrcustoms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.hmrc-government.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tax.hmrc-gov.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tax.hmrc-government.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxs.hmrc-gov.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxs.hmrc-government.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'update.hmrc-government.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.hmrc-gov.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.hmrc-government.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.tax-hmrcustoms.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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