anngriffiths.cardiff.ac.uk

Issued by R10

About this certificate

This digital certificate with serial number 04:ca:a3:d7:97:02:c3:b9:1d:55:39:b5:2c:a6:bc:c2:e1:e5 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=anngriffiths.cardiff.ac.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:ca:a3:d7:97:02:c3:b9:1d:55:39:b5:2c:a6:bc:c2:e1:e5
Serial Number (int): 417403965415070962324464036533315603456485
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 25:e7:24:f4:fe:ad:37:6e:c8:56:15:e9:fc:e3:ab:6f:b9:0c:b5:00
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 33:67:3e:f3:18:94:2b:ef:ad:e3:ef:12:1d:90:7b:66:d9:60:61:78
Fingerprint (sha256): 07:63:da:8f:1e:ce:3f:c0:d9:e6:62:c4:2b:10:81:c7:29:61:29:12:12:45:67:81:4c:b0:da:10:85:00:c3:e7

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate anngriffiths.cardiff.ac.uk

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for anngriffiths.cardiff.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

anngriffiths.caerdydd.ac.uk
anngriffiths.cardiff.ac.uk
anngriffiths.cf.ac.uk
www.anngriffiths.caerdydd.ac.uk
www.anngriffiths.cardiff.ac.uk
www.anngriffiths.cf.ac.uk

Other certificates including the domain name cardiff.ac.uk

(limited to 100 certificates)
medicinesdiscoverydata.cardiff.ac.uk
private.zacharyhill.dev
data.cardiff.ac.uk
ask.cardiff.ac.uk
bidr.cardiff.ac.uk
beta-status.astronomer.io
www.studygroup.com
api.vonagestatus.com
beta-status.astronomer.io
private.zacharyhill.dev
exampapers.cf.ac.uk
api.vonagestatus.com
private.zacharyhill.dev
cwaf.status.radwarecloud.com
beta-status.astronomer.io
roombooking.cardiff.ac.uk
private.zacharyhill.dev
status-pre.cardiff.ac.uk
www.studygroup.com
private.zacharyhill.dev
private.zacharyhill.dev
campionalumni.org
private.zacharyhill.dev
anngriffiths.cardiff.ac.uk
sharelatex.cs.cf.ac.uk
bidev.cardiff.ac.uk
api.vonagestatus.com
mappedsites.cardiff.ac.uk
muscat.astro.cf.ac.uk
campionalumni.org
remotesupport.cardiff.ac.uk
*.data.cardiff.ac.uk
learningcentral.cardiff.ac.uk
status.cardiff.ac.uk
campionalumni.org
www.studygroup.com
blogs.cardiff.ac.uk
polls.cardiff.ac.uk
api.vonagestatus.com
fusion-dev.cardiff.ac.uk
community.mancosa.co.za
campionalumni.org
home.cf.ac.uk
private.zacharyhill.dev
lawpl.cardiff.ac.uk
private.zacharyhill.dev
campaigns.cardiff.ac.uk
connected.cardiff.ac.uk
status-pre.cardiff.ac.uk
api.vonagestatus.com
password-sso.cardiff.ac.uk
www.studygroup.com
www.cardiff.ac.uk
private.zacharyhill.dev
beta-status.astronomer.io
gems.cardiff.ac.uk
git.cardiff.ac.uk
*.data.cardiff.ac.uk
beta-status.astronomer.io
private.zacharyhill.dev
mssgweb02.id.add.cardiff.ac.uk
private.zacharyhill.dev
private.zacharyhill.dev
e2sapi.cardiff.ac.uk
campionalumni.org
private.zacharyhill.dev
mydispense.cardiff.ac.uk
module-evaluation.cardiff.ac.uk
www.studygroup.com
cwaf.status.radwarecloud.com
undergraduate-enews.cardiff.ac.uk
private.zacharyhill.dev
wwwstaging.cardiff.ac.uk
password.cardiff.ac.uk
extranet.cardiff.ac.uk
www.studygroup.com
api.vonagestatus.com
research.cardiff.ac.uk
vault.cardiff.ac.uk
intranet.cardiff.ac.uk
beta-status.astronomer.io
crmapi.cardiff.ac.uk
campaigns.cardiff.ac.uk
www.residences.cardiff.ac.uk
private.zacharyhill.dev
community.mancosa.co.za
gitlab.cs.cf.ac.uk
mmp.cardiff.ac.uk
xerte.cardiff.ac.uk
private.zacharyhill.dev
simstestlearn.cf.ac.uk
rssdp.cardiff.ac.uk
inside.biosi.cf.ac.uk
sitescardiff.cf.ac.uk
adfs.cardiff.ac.uk
www.studygroup.com
private.zacharyhill.dev
hmlupload.cardiff.ac.uk
helix-prod.cardiff.ac.uk
wikis.cf.ac.uk

Certificate

The complete raw certificate details for anngriffiths.cardiff.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15k/voWNzSplDsRxC46z
M3tPyOMmf4lz9mUepcLz4tF5iWQd6Xw7ly9d1qdLfcSG2RCg8ozWvCjm5y8vc1Xo
KS/I6XMZAY3wFHib5dmiq4xISgUsUKdYD/ty24r5dcpVTUxiJiav9ejrGPmN2XjQ
JTuBSAyDBX5lqy916WSPgxlZwrSeHRvrJ8gu6CoBU49acwGvLBa4/IEpzo4o+T8/
doGRwwzylkvIuluKmpiSnSn/QG+qwscr31SnnSOL8uDIn+02HzPphQnk7wnocwnI
q+ZHeqqpCj4W+mfB1zkbB3dgfq8nXMe80wxhv+YUzyhO9c8i/6Kp3lMmrNB2hc99
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 417403965415070962324464036533315603456485
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 02:02:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-21 02:02:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'anngriffiths.cardiff.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27216805466565408806038995786028390288772923004648383726323509906231516527687298142835060597517312368644149400770379202978273129107219053781810420683160103582925339317025125275811924905618436961928234689005395734561002225667941391723316447359077812249499530850019237095787410855706686038835186566318112547478238322479140306676599217940145766668318359672850937513235287178382406379195755995526587213867637154640392801814819502022326839529770094219203642318530723707393816930432184645985054018326966811667433211055290740354299631433985768677674124189330441921023164377363576254320000217444315586317091564823453977509281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25e724f4fead376ec85615e9fce3ab6fb90cb500
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (175 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anngriffiths.caerdydd.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anngriffiths.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anngriffiths.cf.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anngriffiths.caerdydd.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anngriffiths.cardiff.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anngriffiths.cf.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (239 bytes)
							00ed007400eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000190430b81660000040300453043022024ecb0018a4997645d69bd3fe31d2f6c568a8094ddfa9c611f49e55a3aa9c687021f0d6414b1d93d422788544b1ec9c34e09772a64d7fdbfd0578c389b400809f20075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca00000190430b81d60000040300463044022018e304c2ecd7a54af7214b7b0353c1d0ec26b436dbbcffdbd8f477376145d3150220414afdea46334ccc27f4f0cf5cc9d4b68e9173c870b1c217753bf98f4141b7fa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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