www.acumenthirdsector.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:37:44:1c:62:eb:44:2f:b8:af:1c:44:0d:de:e4:fe:e6:4a was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.acumenthirdsector.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:37:44:1c:62:eb:44:2f:b8:af:1c:44:0d:de:e4:fe:e6:4a
Serial Number (int): 280142922870273630705931203712995815253578
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 17:b1:a8:17:8e:4c:90:05:75:82:3c:bf:cc:5c:b3:4b:2e:78:4b:fb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a7:8f:6b:e6:f2:7e:13:7f:45:76:ab:ec:59:bf:19:c0:33:54:ff:07
Fingerprint (sha256): 07:2e:5b:10:7e:9f:89:1c:45:d7:67:b5:44:40:bd:13:c5:be:13:7c:78:c3:0f:c6:3a:cc:31:b0:2b:f3:d4:e3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.acumenthirdsector.net

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.acumenthirdsector.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

healthcare.knightfrank.com
inst.knightfrank.com
land.knightfrank.com
leobrown.co.uk
ukdpc.org.uk
www.acumenthirdsector.net
www.inst.knightfrank.com
www.land.knightfrank.com
www.ukdpc.org.uk

Other certificates including the domain name acumenthirdsector.net

(limited to 100 certificates)
www.acumenthirdsector.net
www.acumenthirdsector.net
www.acumenthirdsector.net
www.acumenthirdsector.net
www.acumenthirdsector.net
www.acumenthirdsector.net
www.acumenthirdsector.net

Certificate

The complete raw certificate details for www.acumenthirdsector.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZTrkK3fDCzXKf9vajQt
PzrvPNdRYJYHZH/s+lYYFVxldC56ngn4HcN3A9ZVhVdD/UZ8/HvFxtyCE6DbKKW6
xRp3nDiJ7De4YKdHmfFlHACmDYoTu72saT4XKqlCNdvjYQk2gW9//0tF+VbhL3n/
w8QH/lvak16pxH3FLcWM8VpOS5j04Z8anNW3VZtlJYJC68swGKnuXe2ZbH+0fCnL
zZxkcYCvAQXfWGO1Bcp628gvdjTLVMZzLaASk65/y4U/AoXqiYFKjVK2XGfJ8KO9
Dm8i4uw5NsQ/59YLDUHkJW/6FS+cPstYP/EJ4CLNNhObL8qURSNXAwATxAUTiO3f
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280142922870273630705931203712995815253578
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 23:03:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 23:03:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.acumenthirdsector.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21407708815206687426786528159089934211092335534672985997949387765120408020749408304224298584102114024958150950570408608891116208259877902274657216618906656498765880558897896212434996487072515001173717052806726143458234072666775349035901891214934266892987854726154631370759301622684090933006590353601723161924890853590063364186920068212723559142567391136676075042603581150508034087868911883625099852184421402007081261223670064055763416586438673948614898120612453246740936787541363324706061193209815403536534862499286476354220475001304991759703220079960646729133630550969646904047890660739429271501067261219864027455331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17b1a8178e4c900575823cbfcc5cb34b2e784bfb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (202 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcare.knightfrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inst.knightfrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'land.knightfrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leobrown.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukdpc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acumenthirdsector.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inst.knightfrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.land.knightfrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ukdpc.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f5e6a0dea0000040300473045022004c3d49efaa2e619f92de3f87ce4ec9c7c47fe56aa869ae52eb30b5288c90019022100d3b04a23c57d545ab21298a3340cdb44c40e931d40e3706448b98607cb9b76390077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f5e6a0e910000040300483046022100c6ec54719dc087ecd041e37718906d145b8fbc4af88cb06091a912af7f89d32f0221009acce11e4559596d50e5d0e5473a63faf979858e1e01a037446aabfeb9be317c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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