nattinastar.ncl.ac.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:a3:b0:af:17:56:cb:f4:cb:ac:de:e4:0e:cf:73:83:17 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nattinastar.ncl.ac.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:a3:b0:af:17:56:cb:f4:cb:ac:de:e4:0e:cf:73:83:17
Serial Number (int): 298645217348493866529996461548421728404247
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6b:85:14:22:d5:3d:57:9e:03:2b:61:e0:c9:1b:52:2c:a2:c4:52:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e8:4d:c5:48:10:c0:74:9e:4d:f9:3a:f5:ce:35:d1:e6:e2:b3:0f:20
Fingerprint (sha256): 03:97:62:ca:7c:44:02:50:8b:37:c9:b4:40:8c:5f:bf:af:b5:a8:90:b9:57:38:56:02:37:54:18:64:0f:e7:ea

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nattinastar.ncl.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nattinastar.ncl.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nattinastar.ncl.ac.uk

Other certificates including the domain name ncl.ac.uk

(limited to 100 certificates)
secureforms.ncl.ac.uk
s3pstatic.ncl.ac.uk
appsdev.ncl.ac.uk
payments.ncl.ac.uk
internal.ncl.ac.uk
mas-rfid.ncl.ac.uk
fmssso.ncl.ac.uk
dev-teaching.ncl.ac.uk
resviz.ncl.ac.uk
nbtr.ncl.ac.uk
pluralheritages.ncl.ac.uk
eams.ncl.ac.uk
fms-pghub.ncl.ac.uk
pluralheritages.ncl.ac.uk
theses.ncl.ac.uk
gateway.ncl.ac.uk
ping.openlab.ncl.ac.uk
postgrad.ncl.ac.uk
chc-silver.ncl.ac.uk
testwebfolders.ncl.ac.uk
s3pstatic.ncl.ac.uk
eptext.ncl.ac.uk
nattinastar.ncl.ac.uk
avsdadmin.ncl.ac.uk
belong.ncl.ac.uk
digitalcultures.ncl.ac.uk
netreg.ncl.ac.uk
mobdev.ncl.ac.uk
eams.ncl.ac.uk
cpd.ncl.ac.uk
belong.ncl.ac.uk
jobs.ncl.ac.uk
booking.ncl.ac.uk
www.societies.ncl.ac.uk
mynewdevplace.ncl.ac.uk
mistageapps.ncl.ac.uk
gateway.ncl.ac.uk
fms-tel.ncl.ac.uk
almaops2.ncl.ac.uk
postervote.openlab.ncl.ac.uk
ness-qa.ncl.ac.uk
pf-pilot.ncl.ac.uk
mobdatadev.ncl.ac.uk
libguides.ncl.ac.uk
fms-peer.ncl.ac.uk
openlab.ncl.ac.uk
commons.ncl.ac.uk
global.ncl.ac.uk
Inspections.ncl.ac.uk
cs-ldap3.ncl.ac.uk
lynx.ncl.ac.uk
learning-maps.ncl.ac.uk
learning-maps.ncl.ac.uk
ltms.ncl.ac.uk
fmsc-svn.ncl.ac.uk
eprint.ncl.ac.uk
staging.openlab.ncl.ac.uk
rockartcare.ncl.ac.uk
hassparticipate.ncl.ac.uk
hg.cs.ncl.ac.uk
tse.ncl.ac.uk
cms.ncl.ac.uk
webstore.ncl.ac.uk
digitalcultures.ncl.ac.uk
teaching.ncl.ac.uk
dg-0125-dc75dcd.client-tls.adestra.com
isis.ncl.ac.uk
eptext.ncl.ac.uk
mclined-online.ncl.ac.uk
ras.ncl.ac.uk
research.ncl.ac.uk
microsites.ncl.ac.uk
moodle.ncl.ac.uk
pdp.ncl.ac.uk
printing.ncl.ac.uk
dbadmin.ncl.ac.uk
sapnonprod.ncl.ac.uk
mail.ncl.ac.uk
rahmede.cs.ncl.ac.uk
dtse.ncl.ac.uk
igm-eln.ncl.ac.uk
union-staffing.ncl.ac.uk
data.ncl.ac.uk
theses.ncl.ac.uk
appsdev08.ncl.ac.uk
appsdev.ncl.ac.uk
theses-test.ncl.ac.uk
msedmini01.ncl.ac.uk
saptraining.ncl.ac.uk
pg-sas.ncl.ac.uk
commons.ncl.ac.uk
ce-gs02.ncl.ac.uk

researchtools.ncl.ac.uk
splus.ncl.ac.uk
catless.ncl.ac.uk
fmssso.ncl.ac.uk
fmssso.ncl.ac.uk
myprojects.ncl.ac.uk
fast.ncl.ac.uk

Certificate

The complete raw certificate details for nattinastar.ncl.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9GZFZiuORL4+FZkAqEY
cLefDEqIlElWywgXZJUEPWEURVlBcu8Bkjr1T6y7sI4sB0j0iuavCM/+66ce1Qi1
JZyhqdX0N6dndriRI7LzYigLaC7or6paXWhvnO86QQh2Hyw5gp3gZlJPAbRJPBDA
gDzSjre2A4ZZyKxdOejaY+7xG1v95iF8AfeH+pTDfychxGMd+RYH0f+eUeJk+xSJ
Wj8alMnBgkdUH83o5Z2RiK07Sws5IJnmUUGor/KSR4WGjv46tlmLYi+cM/MESRwk
t1FQ01RH5567u9o5oAPoqNkEZ6AyIF1KW1WIPOXbWxrqTpwhlWpVP8MMcVO5gxk4
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298645217348493866529996461548421728404247
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-18 11:17:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-16 11:17:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nattinastar.ncl.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24214872867461742147640221175282074263761498988185749960871637296821300863822759597897985762940835801358078332598709170184848739491474357889268699499010991961152891391227831775706070720411405641520845250071839985451455846114256887698054922023878521984184460455500870302312431860874735179937814589713539556856936013904955340461877000811256936279039812087027523521488536899681044468712735910862413531789457595524650958698108960243103334002855774647962789730555943765156788257843177073306562559227897737929958578680182422459455488369456923404299282393542641440939944256170414956314902229952704450539532688482445437778023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b851422d53d579e032b61e0c91b522ca2c4529b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nattinastar.ncl.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ca4a97fd60000040300483046022100f64c37719f35fa859257634fcf1adb156fde077d94260411e7574da01123e239022100f3d67bf0ca510398f9d18c5119e2250e2f4ef1cbc1c91248d82528b25018bcc9007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ca4a981d000000403004630440220369ca54ea3132aacf3b00f4157cf0b7383d10cb0f6ab835db1ada4a58381271202201f2bf67d76842d5262b30042f9a29198a5f7e12c5a78ad187a29e0cd5fcda98f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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