ewds8.strath.ac.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:e2:a5:61:97:71:4e:18:bd:7c:77:d9:2f:aa:cf:b2:f6:67 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ewds8.strath.ac.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:e2:a5:61:97:71:4e:18:bd:7c:77:d9:2f:aa:cf:b2:f6:67
Serial Number (int): 338460502063133423935226592754507994822247
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 89:f1:4c:33:b3:ad:c6:47:a2:3a:c6:6c:5d:3f:5e:fc:f1:53:ce:4a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 50:30:21:91:cb:11:37:78:e1:11:be:d9:87:a4:62:66:2a:d1:1b:68
Fingerprint (sha256): 00:26:3a:2e:1b:2f:6b:75:84:83:cd:1d:9c:9e:2e:59:58:87:a6:70:97:52:41:75:07:0f:f9:6f:5e:1f:4b:ac

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ewds8.strath.ac.uk

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ewds8.strath.ac.uk

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chemstep.chem.strath.ac.uk
ewds8.strath.ac.uk
gradcelebrations.strath.ac.uk
icdl.strath.ac.uk
sipa2project.co.uk
ukecsurvey.org.uk
www.sipa2project.co.uk
www.ukecsurvey.org.uk

Other certificates including the domain name strath.ac.uk

(limited to 100 certificates)
ewds8.strath.ac.uk
its-adfs-f1.ds.strath.ac.uk
digitalassets.strath.ac.uk
sr-test.mis.strath.ac.uk
teledir.strath.ac.uk
ewds.strath.ac.uk
nourishcatering.strath.ac.uk
sbs-chain.sbs.strath.ac.uk
phys.strath.ac.uk
smtphost.cis.strath.ac.uk
cord.bioe.strath.ac.uk
ewds2.strath.ac.uk
new-t4-test.is.strath.ac.uk
training.myplace.strath.ac.uk
content.sbs.strath.ac.uk
its-scom-ms1.ds.strath.ac.uk
frm-eval1.is.strath.ac.uk
activeforpeace.net
spider.science.strath.ac.uk
fback-dsp.is.strath.ac.uk
aria-dev.eee.strath.ac.uk
aria-dev.eee.strath.ac.uk
adm-ts14.ds.strath.ac.uk
www.medea.gsb.strath.ac.uk
content.sbs.strath.ac.uk
guides.lib.strath.ac.uk
pureportal-staging.strath.ac.uk
pgrapps.strath.ac.uk
inteum.strath.ac.uk
ewds2.strath.ac.uk
local.cis.strath.ac.uk
vle.stams.strath.ac.uk
t4-test.is.strath.ac.uk
sunbird.strath.ac.uk
pfact.strath.ac.uk
ewds4.strath.ac.uk
fms.strath.ac.uk
outreach.mathstat.strath.ac.uk
www.cis.strath.ac.uk
inteum.strath.ac.uk
stage.myplace.strath.ac.uk
www.coshh.strath.ac.uk
digitool.lib.strath.ac.uk
sensible.eee.strath.ac.uk
www.alumni.strath.ac.uk
www.cis.strath.ac.uk
ewds.strath.ac.uk
innovation.strath.ac.uk
but.mis.strath.ac.uk
platform.sbs.strath.ac.uk
dev-ocs-aes.tds.strath.ac.uk
5gsummit.eee.strath.ac.uk
autodiscover.eee.strath.ac.uk
onlineshop.strath.ac.uk
5gsummit.eee.strath.ac.uk
gada.strath.ac.uk
smtphost.cis.strath.ac.uk
ewds8.strath.ac.uk
www.sbs.strath.ac.uk
aria-dev.eee.strath.ac.uk
tcnemo.strath.ac.uk
classes2016-2017.myplace.strath.ac.uk
erp-bus-2.ds.strath.ac.uk
www.coshh.strath.ac.uk
activeforpeace.net
cord.bioe.strath.ac.uk
www.metabolomics.strath.ac.uk
www.intranet.sbs.strath.ac.uk
supportal.dmem.strath.ac.uk
mercury.sbs.strath.ac.uk
5gsummit.eee.strath.ac.uk
oracles.eee.strath.ac.uk
new-og.is.strath.ac.uk
platform.sbs.strath.ac.uk
beta-www.strath.ac.uk
map.cis.strath.ac.uk
imaphost.cis.strath.ac.uk
devweb2016.cis.strath.ac.uk
soolin.mis.strath.ac.uk
hub.is.strath.ac.uk
metro.mis.strath.ac.uk
pc-usage.its.strath.ac.uk
db-peg-test.is.strath.ac.uk
pureportal.strath.ac.uk
netlogin-dev.strath.ac.uk
DigiDocs.strath.ac.uk
devweb2018.cis.strath.ac.uk
simple4.ds.strath.ac.uk
www.imagesofresearch.strath.ac.uk
www.studygroup.com
mcampus.strath.ac.uk
classes.myplace.strath.ac.uk
pureportal.strath.ac.uk
map.cis.strath.ac.uk
naglog.is.strath.ac.uk
hub-web1.is.strath.ac.uk
pgrapps.strath.ac.uk
lss.mathstat.strath.ac.uk
aria-dev.eee.strath.ac.uk
api-sims-train.is.strath.ac.uk

Certificate

The complete raw certificate details for ewds8.strath.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAg+YthBTreYP6b07EHXAD
BiIsr2cAD5PyhlalgYpGF47kXfOGruDGKf9yPOVJcL9FZ9PsHiJtshcP0e7f00nY
Us0na1mdt6BrGGwMbKrNE1XomS1yURsiFMtOYN/Xt6xyP8lOzV5GNueK6Q5rmFRj
QLlUQbFA9Lhspt1HPsgOItoxu1aTbsxvj35AVBH4WqdpOtCFEFFnNT3cGahTdys2
VBrQ36oDkFbYJNsO+tLwHfdNonC4BC/qpqqxmu88HeJWH8hAcSzetgOr9Km79tKI
h9yK9zBQANg+PT9u9J76fb3WwrRncNEZUfjibjGGxg8WWbpifZXvH1Q2gCPx36tl
EioJ2HTsCEL59PjMfV7lvJj7zBGL5ing98mf9QZJIlU9DBxtISaZwD5ygL0B5npA
hjha8GSulZ7lsQAbPWFXaYWUe+g61uWJJY7+YSN+kZx4wFXd93x67Gxunjta+OXQ
qWdQAqiGRk7rjRaAt12KD2vAaIHiGbhDASpeIrFPdY59AgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338460502063133423935226592754507994822247
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 11:50:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 11:50:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ewds8.strath.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2993289016238203473202831334590003525684508812482712826745187779330992311115963662002485859562353302728369758991934956559693744345831801923470740215105367074177875669289029076788459298470445098690289337141822706724678086895184990635925896974259590298913503237015038006926408554989220726493324012240644394717558133254057732899423274006301086759968399572971977544990605381564795204895626203746493917026425634167356059872687590201364112690414457012561179602719975432457796739730658937966371042460925549040874087294735511510045204229863119508081380424207299474729514677774239350168443286047798676770341054211057586821733324783987039958067736335970825157022420341088397963752399395878893415899430662142036624157019740202934422924486041633996537793052745710276976285902189383815576498717528810635200651209765629589088555957674096898981208082978121591353082166031131362512917341737023029275684246764840835716111745315054004412452477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89f14c33b3adc647a23ac66c5d3f5efcf153ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (187 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemstep.chem.strath.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ewds8.strath.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gradcelebrations.strath.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icdl.strath.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipa2project.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukecsurvey.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sipa2project.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ukecsurvey.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e7ad0383f000004030047304502200d552f6f714194ff0fcd3ce126fea5f19f95a98a965bfb12b3a7d1af8ee59b89022100cff319cc5941cbe17b9649ccc14b8b13aab0ea0927aaef6bad90eed4b3c5c86a0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e7ad03814000004030046304402201f8021308c32dcd3466bbacc7b6ae359a5028ea792a4940f7875b0240e87018002201c2ed302834281325bbc1d2d98237ba04ed9be791a3c28380e162b57b13f551a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b08f9549d0a8e98600bd4aa2cd5a5a48f9bd4f6a6679e2e783404d6c79308e6762862aa2e75cbac7129a211157b953925feca0f65b4f8ce14324ede9aad134f7b012e80eb2e3aafc7ffd70b8b7fb7a8448162fb2655197d1187e899f08d3c947c2c976462d14ff93e6ac66d73c83acc67a88272b5949ee5241d0a14dd3b3822588644e15cbf175f27b01d8691dbbbaa3bd06773396836a63ab0c75a4935d0bc03a9fa64873492abab0f37422ce460382030571e2139136ba522c29d18a059ef69e3417a9ea1b0f02c0b59eba96bafcc0c367887e065b27582d6c7dfaf34d4e024e216f8e04149e0203701a67972996127302a564c48e2357e1fef3fa4f21665d