www.haveringteachertraining.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5e:58:e8:c8:c2:c9:cf:e6:de:8d:63:ec:7b:94:3b:e2:f2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.haveringteachertraining.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5e:58:e8:c8:c2:c9:cf:e6:de:8d:63:ec:7b:94:3b:e2:f2
Serial Number (int): 293441581034263850265224039063467350287090
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 51:a5:59:5e:b2:43:17:8f:3e:1c:45:35:9b:7b:0b:ff:11:49:11:b0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ac:35:d9:e3:ed:ea:f4:a5:06:30:f4:ef:5f:16:4f:07:6c:67:30:52
Fingerprint (sha256): 00:17:c2:c5:37:fb:77:43:c5:d9:8f:a4:90:a2:78:ca:21:88:5f:f9:91:e8:bd:5b:0f:5a:bd:cf:8e:2f:04:45

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.haveringteachertraining.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.haveringteachertraining.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.haveringteachertraining.co.uk

Other certificates including the domain name haveringteachertraining.co.uk

(limited to 100 certificates)
www.haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
www.haveringteachertraining.co.uk

Certificate

The complete raw certificate details for www.haveringteachertraining.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseZDvXWKt8TeUzRKRoyr
dktqtXrGXg1xoeH+UffPWQTt2Jrth4HDslauovPmMyXMPVJ8DNfIey4DQu6I1mHE
4n0PMyvmt5pZWB/ZP7fL5Tf2i58pSmeeWC5e9OW9j3wsUkuGFOVlHRUJmJWvPZDw
rJeRai9nUFG3yBrmvAZJg5G/8LtlSDq1vVFLYNJm+960FPEoDqw9tcw4/lDEyGfg
eBzGpkdWBGiZ7xePM5hD4sItoCU8FsuYNjySDYC9+F167nNyB/mgbgdiNHMemuIz
WW/BRbPCwBQxc50HWl+fhxeQM73AJu5JUY3ti/uTu2cgAICnGzVllbqpDmqzljTE
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293441581034263850265224039063467350287090
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-20 08:53:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-18 08:53:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.haveringteachertraining.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22457727690000404125690601628215461256800294035157868364914670103248988481995280277088411883415121548794929961565759901745243228439000335412966903738022583813754520829531161879609431805210499818162548949418355533926559868281223607094248026812146384691766348159805150086372895434749447154945600407757010165477536255197721216695866791480612159357292721418540455600596215478657284816657596683080620199961678740298764569213999952699552466994823788837350070967844357371045010765436191962905594011657279204018655303672893601557277886911368059084977629654796818324937945427095149332546728653184134221339171988644879096136909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51a5595eb243178f3e1c45359b7b0bff114911b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haveringteachertraining.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001637cf8186000000403004830460221008284d538be210df48a431e72232b47178dab22648ab54a60fef1f7e3822428bc022100b22c02bc9cfd68ad413305bbd1914772469aba45f51ca0924d935da4281eb1c7007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001637cf81872000004030047304502200e635688766fecb767d3e3d064838db4ac619a4d010b22740eb108d9c069f1e3022100be852ad0ba8e90456ccba5b7f8e0006663fe41a103d83732c90c159397d51d65
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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