library.essex.ac.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:4c:f7:94:ab:64:cc:b8:3c:9d:13:6f:ad:b9:eb:f2:2e:31 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=library.essex.ac.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4c:f7:94:ab:64:cc:b8:3c:9d:13:6f:ad:b9:eb:f2:2e:31
Serial Number (int): 374639694864204463331264299093187655511601
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2a:bb:68:a5:e0:83:f6:da:b8:52:6a:d7:29:64:40:b2:dd:46:42:67
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 43:89:31:08:8d:c0:dd:7c:f0:37:a6:1b:9b:d2:78:e1:a6:36:82:c3
Fingerprint (sha256): 05:15:6e:27:45:85:34:e6:5d:40:a6:cb:72:a9:96:e3:aa:70:45:db:1f:13:75:11:02:4b:75:a9:fd:46:0c:60

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate library.essex.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for library.essex.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

library.essex.ac.uk

Other certificates including the domain name essex.ac.uk

(limited to 100 certificates)
poptargs.essex.ac.uk
3ds-status.outseer.com
esbs.essex.ac.uk
perception.essex.ac.uk
svistunenko.essex.ac.uk
trail.essex.ac.uk
dern.essex.ac.uk
findyourway.essex.ac.uk
ihr.essex.ac.uk
dasa4.essex.ac.uk
findyourway.essex.ac.uk
findyourway.essex.ac.uk
library.essex.ac.uk
*.online.essex.ac.uk
reportandsupport.essex.ac.uk
genomics.essex.ac.uk
www2.essex.ac.uk
libcal.essex.ac.uk
autonomy.essex.ac.uk
anawiki.essex.ac.uk
email.essex.ac.uk
miscweb.essex.ac.uk
3ds-status.outseer.com
autonomy.essex.ac.uk
findyourway.essex.ac.uk
email.essex.ac.uk
epigenetics.essex.ac.uk
3ds-status.outseer.com
email.essex.ac.uk
csee.essex.ac.uk
3ds-status.outseer.com
uoecrmfs.essex.ac.uk
moodle.essex.ac.uk
svistunenko.essex.ac.uk
3ds-status.outseer.com
onbase.essex.ac.uk
erams.essex.ac.uk
powerlessness.essex.ac.uk
www.essex.ac.uk
hrorganiser.essex.ac.uk
csee.essex.ac.uk
orb.essex.ac.uk
autonomy.essex.ac.uk
lib.essex.ac.uk
reportandsupport.essex.ac.uk
findyourway.essex.ac.uk
iservpn0.essex.ac.uk
platform.recflow.co
www.essex.ac.uk
email.essex.ac.uk
3ds-status.outseer.com
ris.essex.ac.uk
*.prospectus.essex.ac.uk
cci.essex.ac.uk
seedvicious.essex.ac.uk
findyourway.essex.ac.uk
libcal.essex.ac.uk
repository.essex.ac.uk
daint.essex.ac.uk
tracegasbiology.essex.ac.uk
encore.essex.ac.uk
nosey.essex.ac.uk
www2.essex.ac.uk
zendto.essex.ac.uk
csee.essex.ac.uk
jedi2019.essex.ac.uk
cseegit.essex.ac.uk
autonomy.essex.ac.uk
*.web.ucu.org.uk
uinet.essex.ac.uk
genomics.essex.ac.uk
gate.essex.ac.uk
3ds-status.outseer.com
moodle.essex.ac.uk
www.essex.ac.uk
3ds-status.outseer.com
www2022.essex.ac.uk
vcblog.essex.ac.uk
3ds-status.outseer.com
software.essex.ac.uk
tracing.essex.ac.uk
repository.essex.ac.uk
tableau.essex.ac.uk
excel-like-issue-editor-for-jira.status.ricksoft-inc.com
csee.essex.ac.uk
bob2.essex.ac.uk
filestore.iser.essex.ac.uk
3ds-status.outseer.com
3ds-status.outseer.com
climatelearningresources.org.uk
catalogue-sso.essex.ac.uk
childparticipants.essex.ac.uk
itstatus.essex.ac.uk
3ds-status.outseer.com
cci.essex.ac.uk
researchdata.essex.ac.uk
3ds-status.outseer.com
genomics.essex.ac.uk
itsm.essex.ac.uk
repository.essex.ac.uk

Certificate

The complete raw certificate details for library.essex.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiqM+bu6p+OFa7S19AxK
IVYVPju+OhwbdYTTrmFUzbrhkXdqaynbZPbfMKHhZh0iLwgPNJ3UZkcfPAuJDdCp
8ret5UTBJ3LluzthGp50ZTV+rcOXpruWAMc4XHoOR+InYAChPsK5QmWyoLSI8xBl
FNRNdZqqUT89j9YmjP20D6n+wUqki5pisYJ5T/i35x20xh33cFM9K2LmI9e/rH82
A3dKOvsEt3wDFIvhkusTXKSz8m+phh6ma/FqZjESVAYctT9eK5YkXLY9r5Jnv05X
ugnf/ZPGKFeYc5Phyw2wdCK9TowB1uzWV8plIO4V7t7JfDaGbDS2WpQDGJcbunKW
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374639694864204463331264299093187655511601
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 12:10:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 12:10:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'library.essex.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22491400809071024209680567684378050652032395423560655863746197529466015925120549593267561576546832824950573744605855231959922926652246588303922950219693697296675856105241062520343226448817288586053749790332982900182217420064711683184071870210369238528844601036823043797334449727886326119178716728674387234876411431879287514346523940063500015234101908592374309663014030763604352093092093914397706626041922152589094609135482584357555154383196297754463094756546779156168784489039046475811422238411323566192922088237790681162155745438809538807737296708295929947683797195459670893215453905788463246154738040855051533194833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2abb68a5e083f6dab8526ad7296440b2dd464267
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.essex.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c3f4029160000040300463044022023c36487ea041497438c5744b78a5ff8433ba67f5b1011186c7591321af818d0022003809fb2e94d70812b78bbf360ee1f99b14cdf48fa75f541c85036352536597a00750029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c3f4029c9000004030046304402201fd722665461188fc28c5bd98553c575c267a7f312a88a77d919c254237e4a100220409370a8e8f76e020f3f6800b83484a1b58fd38e4cc7345f8f0da6e87641a7fc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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