DV SSL/TLS Certificate for nlcuk.net

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the nlcuk.net DV SSL/TLS Certificate

This certificate with serial number 06:63:31:06:e4:46:8d:04:b6:f3:11:04:75:42:eb:5f:5d:7a for nlcuk.net was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for nlcuk.net provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:63:31:06:e4:46:8d:04:b6:f3:11:04:75:42:eb:5f:5d:7a
Serial Number (int): 556426837871288003943977474210716679363962
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: ca:8a:20:25:c5:0d:a7:8b:2e:48:cf:35:db:98:92:9e:4a:4b:12:58
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 61:35:fa:94:c9:96:ff:b8:ed:92:99:8a:43:75:f3:63:fd:e4:2a:6c
Fingerprint (SHA-256): af:1f:b7:7b:d8:6e:2c:b0:80:19:9b:78:b9:ef:99:a3:cf:50:ef:52:ed:45:3c:ad:63:2f:3e:8a:d5:cc:29:4d

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

OCSP Server: http://r10.o.lencr.org
CRL Distribution Point: http://r10.c.lencr.org/123.crl

Check the revocation status for certificate nlcuk.net
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for nlcuk.net

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

nlcuk.net

X.509 Certificate

The complete raw X.509 certificate details for nlcuk.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISBmMxBuRGjQS28xEEdULrX116MA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjUwNDMwMDY1MzExWhcNMjUwNzI5MDY1MzEwWjAUMRIwEAYDVQQD
EwlubGN1ay5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOkWMd
f5xwuxO5Rm4wPZoSh+8gwFjdGzhddZQZTMPu6MQs/Rcg+eO6Hvgr9dy0bSkghhUw
OpnWRV9/3iebDjVafNftgshlfF70XOaQQ5TKg6t9nB2BvIk3UuP4k4elPu1S8Sec
h97unpgff7GhLmXl2PmX6svch5sVUJH/6j8MaBmVjRbkYK6TR1pMdIOXS3a7IQzt
YXIpKdk47G4EFB93d9izAYejHtSWzz+FuuQLkCKAOqTnKC+QGBjEjnNCJ5p/fylv
U0nx+Dv3yOhHwt3uEuj36kvkr6JIb0B4VQ2abYEm12/X+KAx+rY1i20c5TNw3WSH
68jObxj5ieR8MlqJAgMBAAGjggI/MIICOzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FMqKICXFDaeLLkjPNduYkp5KSxJYMB8GA1UdIwQYMBaAFLu8w0el5LypxsOkcgwQ
jaI14cjoMFcGCCsGAQUFBwEBBEswSTAiBggrBgEFBQcwAYYWaHR0cDovL3IxMC5v
LmxlbmNyLm9yZzAjBggrBgEFBQcwAoYXaHR0cDovL3IxMC5pLmxlbmNyLm9yZy8w
FAYDVR0RBA0wC4IJbmxjdWsubmV0MBMGA1UdIAQMMAowCAYGZ4EMAQIBMC8GA1Ud
HwQoMCYwJKAioCCGHmh0dHA6Ly9yMTAuYy5sZW5jci5vcmcvMTIzLmNybDCCAQUG
CisGAQQB1nkCBAIEgfYEgfMA8QB2AMz7D2qFcQll/pWbU87psnwi6YVcDZeNtql+
VMD+TA2wAAABloWuGWsAAAQDAEcwRQIhAIWHheAXxwjwON3u42am57PifkjwwOXR
P84q0kdGMHz9AiApHY/9z0sM9mIc1pgQClgFFaB6nKXk+1V8TWRRgyrGnQB3ABLx
TjS9U3JMhAYZw48/ehP457Vih4icbTAFhOvlhiY6AAABloWuGQwAAAQDAEgwRgIh
AMIkjvDwI3VZvlpTYd6QXAhE4tWsU5nkWMLl1xSu76jyAiEArJPds7X9l1N8GTfA
6lllJGHTL6ahEfpRuqBcBzQwyyowDQYJKoZIhvcNAQELBQADggEBAFpnvmNbWcmT
J0aXvKxbUFzw/ZpGwJPLXfpmPilvYCIH+AyzNDlies0p7DAuv94M/SUEXBZd2wl/
Yp4QUpFGbqGduhmZLkxsIY4/AK7V0C6k7hU+ywQswa0nGP9YT9s58GE5U6N6d9aj
JOvUWd1itcdGR7RDAnqbWHVuzQtDSZchLWlDhoNP3j6wxeU9FvQKl5FLE7Nf5hHS
1bijACfngq/URDlYoGFoLWTr4N6nxPy7wW0WZxlRYTBJnxVOEEisOiQiAGLEOShI
uJZVBttqdPrYLGO+mrdf0yt22eY8Z5ky1Svc+joLXV/2l2fHwcXpTNJ4RnkPQcT7
fciNpzfi7i4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpFjHX+ccLsTuUZuMD2a
EofvIMBY3Rs4XXWUGUzD7ujELP0XIPnjuh74K/XctG0pIIYVMDqZ1kVff94nmw41
WnzX7YLIZXxe9FzmkEOUyoOrfZwdgbyJN1Lj+JOHpT7tUvEnnIfe7p6YH3+xoS5l
5dj5l+rL3IebFVCR/+o/DGgZlY0W5GCuk0daTHSDl0t2uyEM7WFyKSnZOOxuBBQf
d3fYswGHox7Uls8/hbrkC5AigDqk5ygvkBgYxI5zQieaf38pb1NJ8fg798joR8Ld
7hLo9+pL5K+iSG9AeFUNmm2BJtdv1/igMfq2NYttHOUzcN1kh+vIzm8Y+YnkfDJa
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 556426837871288003943977474210716679363962
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-30 06:53:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-29 06:53:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nlcuk.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26076783908011353533365386078427779771972177604299820182047362638353558934618948763366490025226158661283734871610270278336435654846640488601160748214249092206485762282854452958544992950817796250921290346124874005432414259368054434720904728435023866410730010630942249778988668428083723298891250259665949554277477104048248574109751637174984989882366731614282585331948990120261464326073033912439817809652854435946705321241187924333876512460068159547036003061782584816008601524650476213002006769400005929087878115688795199103747423144692251996648604219351018938989967738694845537403431422287491143729143211403080786664073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca8a2025c50da78b2e48cf35db98929e4a4b1258
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlcuk.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/123.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000019685ae196b0000040300473045022100858785e017c708f038ddeee366a6e7b3e27e48f0c0e5d13fce2ad24746307cfd0220291d8ffdcf4b0cf6621cd698100a580515a07a9ca5e4fb557c4d6451832ac69d00770012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a0000019685ae190c0000040300483046022100c2248ef0f0237559be5a5361de905c0844e2d5ac5399e458c2e5d714aeefa8f2022100ac93ddb3b5fd97537c1937c0ea59652461d32fa6a111fa51baa05c073430cb2a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005a67be635b59c993274697bcac5b505cf0fd9a46c093cb5dfa663e296f602207f80cb33439627acd29ec302ebfde0cfd25045c165ddb097f629e105291466ea19dba19992e4c6c218e3f00aed5d02ea4ee153ecb042cc1ad2718ff584fdb39f0613953a37a77d6a324ebd459dd62b5c74647b443027a9b58756ecd0b434997212d694386834fde3eb0c5e53d16f40a97914b13b35fe611d2d5b8a30027e782afd4443958a061682d64ebe0dea7c4fcbbc16d166719516130499f154e1048ac3a24220062c4392848b8965506db6a74fad82c63be9ab75fd32b76d9e63c679932d52bdcfa3a0b5d5ff69767c7c1c5e94cd27846790f41c4fb7dc88da737e2ee2e