webserver.srcf.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:56:d5:b0:5b:e2:b7:48:b9:30:67:dc:b0:17:fb:77:b3:0d was issued on by Let's Encrypt.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webserver.srcf.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:56:d5:b0:5b:e2:b7:48:b9:30:67:dc:b0:17:fb:77:b3:0d
Serial Number (int): 290885182621492299342825841390861977891597
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b5:20:13:a4:40:c3:92:76:ff:f8:df:50:7e:aa:1a:c4:72:50:3a:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 07:23:30:d1:ca:58:5d:2a:fd:19:c8:99:04:8a:2f:74:8e:e0:ad:96
Fingerprint (sha256): 04:90:0a:aa:43:0a:ac:c5:7a:64:81:ca:cf:32:1b:d1:9d:3e:39:4c:4d:69:10:28:0f:48:fb:f7:75:d3:fb:7c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate webserver.srcf.net

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webserver.srcf.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

archim.org.uk
archim.soc.srcf.net
chtj2.user.srcf.net
cph.soc.srcf.net
cuadc.org
cuadc.soc.srcf.net
cuhkcas.soc.srcf.net
dec41.user.srcf.net
dec41test.soc.srcf.net
docushare.cuadc.org
eureka.archim.org.uk
fitzjcr.soc.srcf.net
media.fitzjcr.com
mzjp2.user.srcf.net
physics.soc.srcf.net
propstore.cuadc.org
rcsarooms.soc.srcf.net
roomballot.fitzjcr.com
rooms.rcsa.co.uk
static.fitzjcr.com
tedxcam.soc.srcf.net
webserver.srcf.net
www.archim.org.uk
www.cuadc.org
www.eureka.archim.org.uk
www.tedxcambridgeuniversity.org

Other certificates including the domain name srcf.net

(limited to 100 certificates)
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
winnie.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
status.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
status.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webmail.pip.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
manatee-gw.malc.org.uk
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
seismograph.srcf.net
webserver.srcf.net
webmail.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
peterhousebc.org
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net

Certificate

The complete raw certificate details for webserver.srcf.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290885182621492299342825841390861977891597
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-19 12:25:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-17 12:25:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webserver.srcf.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796089480847716611992463698401631735688796487963601079469483670205303178940955709165478148203128368939734053584076410297825723771057814293225968498697712924344004983349704844301785327664122614705056251497301010693894258460480729558721321403918046804908938625749679504257818049382330116054037312001404755059308103359751916853288254632334680914519219320191270659941769478833119149134946720793897341353291424524059337176463333701431638667665743568602778451163632338934954611731828787522295898176713431806653240164806724979461896586714742868411738285695484303495243445058621035622049859627196591874635333997059159173648974073043778195406693397491668652156081475054999383908902961968252644786974311029473623770750417776054846464520177579816666998725156704439795727939228365367346686928743271644784039697713532265593850626072432677829034070909416602813131439220908014320770866660581430089790635086923757562246426478824557495400785419452162835337656922222716309163597370574711355856091286990734243208946113435560104547006976701880258881254114754417433522787639721981149826550764404478264889558745734872005395078139118389118787248298105344837893978623182062062163965342173595581788391358726979437694809157395201280248331091584891952796029967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b52013a440c39276fff8df507eaa1ac472503a48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (546 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archim.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archim.soc.srcf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chtj2.user.srcf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cph.soc.srcf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuadc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuadc.soc.srcf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuhkcas.soc.srcf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dec41.user.srcf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dec41test.soc.srcf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docushare.cuadc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eureka.archim.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitzjcr.soc.srcf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.fitzjcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzjp2.user.srcf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'physics.soc.srcf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propstore.cuadc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcsarooms.soc.srcf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roomballot.fitzjcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rooms.rcsa.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.fitzjcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedxcam.soc.srcf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webserver.srcf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archim.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuadc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eureka.archim.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tedxcambridgeuniversity.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001672c25d49f0000040300483046022100b1cbb7af37431b02e8ca60c0192cabd2301201a138b2098292fcdd5ee4dab99a022100f2dae7935a6741a1afeca595eb536ae45f1a1213c4a81ed96433651e0ca035f200770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001672c25d69c0000040300483046022100858f2704e45fcde566ab2c3715b45b48237460f7ab8cff11af31e5937d8d52ee022100fab5e930f3ecd5f92ee28f6345367a614a00697060f182c34e930c2f1e2409d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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