webserver.srcf.net

Issued by R3

About this certificate

This digital certificate with serial number 04:f2:a8:c1:f1:d9:ec:7d:9e:b5:27:76:dc:64:16:92:68:99 was issued on by Let's Encrypt.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=webserver.srcf.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:f2:a8:c1:f1:d9:ec:7d:9e:b5:27:76:dc:64:16:92:68:99
Serial Number (int): 431021793843820073906181230347772214012057
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5e:40:dd:5d:c1:5c:09:a4:0b:94:12:89:5f:93:6e:47:c3:b9:d6:60
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 63:98:58:55:5c:88:16:ae:3b:a2:a0:0a:25:1a:4e:0d:32:c3:7a:73
Fingerprint (sha256): 00:67:82:2d:d0:3f:c0:f5:52:e3:c0:4a:02:83:72:89:51:cd:a9:c8:b2:00:5f:67:dd:fa:2d:30:f2:9c:2f:4c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate webserver.srcf.net

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webserver.srcf.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agarri.ga
beta.solidaritee.org.uk
ci.dev.cuer.co.uk
crschneider.com
cuams.soc.ucam.org
cumc.org.uk
cuoc.org.uk
judo.soc.ucam.org
mail.solidaritee.org.uk
pembrokemayball.co.uk
rhs.trumpton.town
roomsview.magd.cam.ac.uk
sjcjcr.com
springball.com
srcf.uk
static.magdalenemayball.com
test.sjcjcr.com
ticketing.pembrokemayball.co.uk
webserver.srcf.net
www.crschneider.com
www.cuams.soc.ucam.org
www.cumc.org.uk
www.cuoc.org.uk
www.judo.soc.ucam.org
www.lt0.uk
www.pembrokemayball.co.uk
www.sjcjcr.com
www.springball.com
www.srcf.uk

Other certificates including the domain name srcf.net

(limited to 100 certificates)
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
winnie.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
status.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
status.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webmail.pip.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
manatee-gw.malc.org.uk
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
seismograph.srcf.net
webserver.srcf.net
webmail.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
peterhousebc.org
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
cuastronomy.co.uk
lists.srcf.net
webserver.srcf.net
webserver.srcf.net

Certificate

The complete raw certificate details for webserver.srcf.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431021793843820073906181230347772214012057
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-21 01:36:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-20 01:36:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webserver.srcf.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783132060902093755123139303162375701661745353788959212542833193396350956672303611834950257166756706305715592864342946503131929003366655541151976461161269257675426067442326047271414954739440173379302239633701677738451854217003350682190700017792858637268433152810949794373669027548898117467651509464717626410792804323680398891886803187123339491835063971082353526192213351663502281623377020464788357172157892961608259749136932125702953719383629007805851289704859743851258655633782240834334007884132559876544186744275582839164751078602709872475302504154082087257792863951181797813903790165856700730027420418393057334922077087029963040439807673013015537729780718033885687734218938124056376567949157924366219111543385478652521613484747119587390250622304524435679115752086590303968000258720058153918915285147453257251990135484472200035259126894776678581339822263853340684552461773583458469415468654410808168004203650123237364942079868341831077251647611363921338368847418578547282091077907273643996577324188274322335510657158613464503686367616861061779264203920959667353707920202582915752106872449083418960692455592782194089497883903459521424539871165869830202385504910420217283447224215982458111605199355913745184844944974701555054875185231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5e40dd5dc15c09a40b9412895f936e47c3b9d660
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (560 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agarri.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.solidaritee.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.dev.cuer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crschneider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuams.soc.ucam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuoc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'judo.soc.ucam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.solidaritee.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pembrokemayball.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhs.trumpton.town'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roomsview.magd.cam.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcjcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srcf.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.magdalenemayball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sjcjcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.pembrokemayball.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webserver.srcf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crschneider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuams.soc.ucam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuoc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.judo.soc.ucam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lt0.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pembrokemayball.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcjcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.springball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.srcf.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018efe82f7770000040300483046022100eb52fa3f25ba7ff0d8844bc1e8b706b7d67a3981011dd48d9fb77a99b78c076c0221009e3dab69b89969fe88237d061040c6c09066482938322d9b9bdc83ef2d20af6c007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018efe82f8350000040300473045022001fe80988f88080f0a4c8b240bec47ec3008836652f5b4bf6859783eec4152f2022100cbc2b1610c6a82c7836057c6190eb9136a47796be5b333dc5d0b8065d415be3c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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