bikelibraries.yorkshire.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4e:1f:9b:40:04:f0:b7:5f:79:e1:cd:0a:9d:34:6a:04:e9 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bikelibraries.yorkshire.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4e:1f:9b:40:04:f0:b7:5f:79:e1:cd:0a:9d:34:6a:04:e9
Serial Number (int): 287920894587461970750776577487941019501801
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4c:f6:6f:da:a7:fe:ef:28:8e:17:9e:91:82:5f:bc:b6:ef:76:5e:a0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 90:78:dc:51:3c:25:f7:7d:6f:13:52:f8:c0:50:ff:a4:08:c7:85:a7
Fingerprint (sha256): 07:ac:50:03:0e:fd:2f:4f:cd:92:80:46:8f:39:38:3a:a5:54:ac:5a:74:6d:38:05:91:76:48:7e:ee:eb:eb:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bikelibraries.yorkshire.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bikelibraries.yorkshire.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bikelibraries.wty.40.112.77.30.nip.io
bikelibraries.yorkshire.com

Other certificates including the domain name yorkshire.com

(limited to 100 certificates)
yorkshire.com
letour.yorkshire.com
letour.yorkshire.com
worlds.yorkshire.com
comms.yorkshire.com
bikelibraries.yorkshire.com
www.yorkshire.com
www.yorkshire.com
bikelibraries.yorkshire.com
plan.yorkshire.com
www.yorkshire.com
oldtdy.yorkshire.com
admin.yorkshire.com
www.yorkshire.com
yorkshire.com
letour.yorkshire.com
letour.yorkshire.com
bookings.yorkshire.com
www.yorkshire.com
letour.yorkshire.com
arts.yorkshire.com
bikehubs.yorkshire.com
www.yorkshire.com
tdf.yorkshire.com
yorkshire.com
bikelibraries.yorkshire.com
www.yorkshire.com
worlds.yorkshire.com
letour.yorkshire.com
worlds.yorkshire.com
www.yorkshire.com
bikehubs.yorkshire.com
www.yorkshire.com
autodiscover.yorkshire.com
worlds.yorkshire.com
www.yorkshire.com
letour.yorkshire.com
letour.yorkshire.com
worlds-admin.yorkshire.com
sip.yorkshire.com
assets.comms.yorkshire.com
worlds-admin.yorkshire.com
places.yorkshire.com
de.yorkshire.com
admin.yorkshire.com
admin.yorkshire.com
www.yorkshire.com
book.yorkshire.com
www.lostdogs.yorkshire.com
worlds-admin.yorkshire.com
m.yorkshire.com
www.yorkshire.com
letour.yorkshire.com
www.yorkshire.com
attractions.yorkshire.com
worlds-admin.yorkshire.com
tdffestival.yorkshire.com
industry.yorkshire.com
letour.yorkshire.com
be.yorkshire.com
bikelibraries.yorkshire.com
bikelibraries.yorkshire.com
letour.yorkshire.com
letour.yorkshire.com
www.yorkshire.com
www.letour.yorkshire.com
bikelibraries.yorkshire.com
bikelibraries.yorkshire.com
www.yorkshire.com
bikelibraries.yorkshire.com
cn.yorkshire.com
industry.yorkshire.com
www.yorkshire.com
letour.yorkshire.com
owa.yorkshire.com
worlds.yorkshire.com
bikelibraries.yorkshire.com
surveys.yorkshire.com
wra.yorkshire.com
www.yorkshire.com
www.yorkshire.com
mail.yorkshire.com
bikelibraries.yorkshire.com
industry.yorkshire.com
www.yorkshire.com
letour.yorkshire.com
attractions.yorkshire.com
www.yorkshire.com
fr.yorkshire.com
letour.yorkshire.com
www.yorkshire.com
tdf.yorkshire.com
chelsea.yorkshire.com
www.yorkshire.com
bikelibraries.yorkshire.com
www.yorkshire.com
yorkshire.com
tourde.yorkshire.com
accommodation.yorkshire.com
letour.yorkshire.com

Certificate

The complete raw certificate details for bikelibraries.yorkshire.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggqSoOICs3Hef/tjUhYr
jBkcxSyQkBbbBcL3RfKWn0Hzlu1naBvxk3m3Sl8lty6mrdRIdXhqFHGd2cCFeacI
Y3OhD1jBLaMtO1j+LcNxiSdJMa9Lq9de6b4eJUS9gBB+Yi2AqtP8fa+uyC4bN/RT
oAAddHQ0d7gDAcLXQ4fu6fXB4el4RA6+vABEUu7JXlWpg9xEa2QOpvFJfwQ1M8bk
Wjux9Z/uQ11B5Odt/Aqi4wXrsAiNPpJOMl8fV5K4smcharARgrOOdunIEOoiEApz
C+xtv9n9FkwUFprXX5gVc8ASkJocKz4WP1tKB7SURYQHz09uu2NQvW6yx4NVrgor
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287920894587461970750776577487941019501801
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-01 16:37:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 16:37:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bikelibraries.yorkshire.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16416193271495978900052314060012765614340682383180307293993534870783068212000976563378824986750730293783216633084747853903501031213460122720786887532487818380541198306071047206123105926489349666092766419440006666182856899925883640898953527240247173675304515835602885521884989225536782023465265122027966362842154635419536539056414593164629759586358006932610606929879579177644786280518184897971859763686045601560285924579988584215459870363983240906518256483941063219536387859505332837604357095915965496823801527276548638831710735535424333016808395206130380157610013770290311946237002219102844186947159948467123394325467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4cf66fdaa7feef288e179e91825fbcb6ef765ea0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikelibraries.wty.40.112.77.30.nip.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikelibraries.yorkshire.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bae9d41600000040300473045022100e651f1fb52174d45ce9ade4ad078929486e8f7abb4d09e64364a7ed13735106e02202d3a83a27ee903028ba3b40cfc3ba94b555807a0c5bc378b2e29ec88dee8d6ff007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bae9d41520000040300463044022047fc6bb49ff3abc7396775ee85fe5c0b8b995c81a557df1115de67d4e96ed0dc02205fa97bd4db2f29692cdb8793224edcb9121b9797341849bd7ea00d8cc4c36f4e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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