csgs.kcl.ac.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:43:2e:03:45:ce:ba:03:ce:1b:d4:c7:0b:7a:ec:3b:c8:eb was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=csgs.kcl.ac.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:2e:03:45:ce:ba:03:ce:1b:d4:c7:0b:7a:ec:3b:c8:eb
Serial Number (int): 284196937859545131668383089542305121290475
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f8:8c:10:bb:1f:03:f3:93:09:d7:e2:36:90:8e:e7:83:5c:07:36:47
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cd:ba:72:d4:9e:ef:2d:2c:ee:46:03:1f:11:7f:9b:2c:21:53:63:0b
Fingerprint (sha256): 0a:02:0e:0c:db:b3:6d:2d:2f:85:a1:19:bf:46:6b:96:5e:dd:b6:9d:08:bb:7f:e9:e6:4b:d5:36:62:1d:c8:09

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate csgs.kcl.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for csgs.kcl.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

csgs.kcl.ac.uk
www.csgs.kcl.ac.uk

Other certificates including the domain name kcl.ac.uk

(limited to 100 certificates)
mentoring.kcl.ac.uk
mentoring.kcl.ac.uk
mentoring.kcl.ac.uk
www.brightlinks.org
www.brightlinks.org
www.brightlinks.org
www.brightlinks.org
www.brightlinks.org
accreditation.lumanity.com
alumnicredentials.kcl.ac.uk
covid-testing.kcl.ac.uk
www.brightlinks.org
support.kcl.ac.uk
addneuromedsrs.kcl.ac.uk
achievements.launchyou.com
charm.kcl.ac.uk
training.kcl.ac.uk
achievements.launchyou.com
s2lab.kcl.ac.uk
www.brightlinks.org
charm.kcl.ac.uk
www.brightlinks.org
ems.nms.kcl.ac.uk
www.ctr.kcl.ac.uk
www.kcl.ac.uk
thestrandgroup.kcl.ac.uk
www.brightlinks.org
charm.kcl.ac.uk
mentoring.kcl.ac.uk
www.brightlinks.org
www.brightlinks.org
accreditation.lumanity.com
www.brightlinks.org
mentoring.kcl.ac.uk
www.brightlinks.org
mentoring.kcl.ac.uk
alumni.kcl.ac.uk
placement.kcl.ac.uk
www.brightlinks.org
athenaswan.kdl.kcl.ac.uk
triangle.mth.kcl.ac.uk
cturandomisationmvc.iop.kcl.ac.uk
*.libproxy.kcl.ac.uk
blogs.kcl.ac.uk
www.brightlinks.org
iospe.kcl.ac.uk
www.brightlinks.org
amdb.isd.kcl.ac.uk
www.brightlinks.org
www.brightlinks.org
mentoring.kcl.ac.uk
san01.hosted.exlibrisgroup.com
mentoring.kcl.ac.uk
automation.platform.kcl.ac.uk
achievements.launchyou.com
librarysearch.kcl.ac.uk
sharc.kcl.ac.uk
media.kcl.ac.uk
www.brightlinks.org
mentoring.kcl.ac.uk
nmmoodle.kcl.ac.uk
kclsfbpool01.kclad.ds.kcl.ac.uk
www.brightlinks.org
mentoring.kcl.ac.uk
mentoring.kcl.ac.uk
api.erg.kcl.ac.uk
ircyr.kcl.ac.uk
mentoring.kcl.ac.uk
khcn.kcl.ac.uk
mentoring.kcl.ac.uk
library.kcl.ac.uk
achievements.launchyou.com
mentoring.kcl.ac.uk
www.brightlinks.org
www.brightlinks.org
curium.nms.kcl.ac.uk
radiusacsd.kclad.ds.kcl.ac.uk
www.brightlinks.org
accessedge1.mykcl.info
www.brightlinks.org
accreditation.lumanity.com
keats.kcl.ac.uk
mentoring.kcl.ac.uk
mentoring.kcl.ac.uk
mentoring.kcl.ac.uk
www.brightlinks.org
csgs.kcl.ac.uk
libcal.kcl.ac.uk
www.brightlinks.org
www.brightlinks.org
www.isd.kcl.ac.uk
www.brightlinks.org
kdl.kcl.ac.uk
mmee.kdl.kcl.ac.uk
www.brightlinks.org
mentoring.kcl.ac.uk
kclpure.kcl.ac.uk
testlibrary.cc.kcl.ac.uk
accreditation.lumanity.com
s400.kdl.kcl.ac.uk

Certificate

The complete raw certificate details for csgs.kcl.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8VdAP0G9fa61Hv2sEA4B
aeB7tQ8SZ6hjfYCqN86DOmgVmF2rwm+ZYUdeqg1rrn3m6qKDyeyi+ySAKyArxtps
d8jEZ2ckcS8pMhkO/LULehQwc2t8jUgl+8Yp/CiLXSkJy9xFtsMIMkN4UiFT5svE
OTyAdvQohhsE/3FghaBwUbhU9qIn6zOKX1NP/e6EkcDX6TQWjJ2bqw8R+aMMBV8s
pYtEorzWFrZcLSQYo/C9vGUHjUr+WT7mahvlTFXqJuKhRbR7/KS2khqUBGpnr62D
OdNw/YiraZnnrYb9YZpDNyLoqVM2TOzlzCrNdutnqqbztAl8otlikvhg+WKTVb1R
qmX+r7yUhjtHQg3LsL2KQxJR476ly9CSJu8O8M8TRC7IA0Bsr7HNRUknYeMGKeMG
tqqvZ/5JrswKx0KuKrJLlfUjflzFjzTjIhWbo4RUR9Lz4mOGXnsblyBya+caexRR
BLwOICDcpdiq1Ubur1nB6zR5sc/35pyILg+Sjuh9vWkt3wmsKpd4ENrH0P6yMPEo
JSfdGO+WUTZPd25PQrScgHCZUGbdyyKVkZqTKGS7ijiICJWsGQfDPy8fFRkoD0e1
tDXfleLq0PFTVAlGg4nX4TESvRmF9yqSkGPJvETii/wTxMv6uy14ggpIBtMj9Yip
doqiLIUNgjkPpb7aLDbC68MCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284196937859545131668383089542305121290475
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-11 03:30:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-09 03:30:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'csgs.kcl.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 984584661340887718465642836306168432862216616228011949815646528024202256191973154206882673450933062790947623747520140743464698473563656789319672420361040746651816126889711440084558002006399132844933661654154044820262781027388450553032929956151367903994002087884303933946498330513853818401978577173167126512985272631120647303930380390877228909553719855380914860089286524282561342772358811771998177101579431159905540554554349777742804912821556931826687612092958527077132188869564199299651377258896833090556567367125377372514044856038053646004734520767555047516451993634608863628072424216389095548303146990488097483758254585812696663096968856837306314510676109062515784195194497226130694839455306314411322312101473736525264678197129054147766084631570489804871894495259181964400209980290368624730212839046827129056607694287623501523333172210274482139517938495202405345976084894955444878719929614214975111219824422163178874421094002173221720101532119652985648472890972820490898510504182211555627768590828843750639054964028172427712192984698095607549926978480935653059351324482669307340506154831228502961865479688705618165628477835936376150616498465720485508956406628790145968310545853561704632068013676953639279196063522294182201161608131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f88c10bb1f03f39309d7e236908ee7835c073647
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csgs.kcl.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csgs.kcl.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c7ef0debe0000040300473045022100fb261592339e9872ac5fa4bc0cd386e31b7a399d442761622cee7fb5a366bddc02202d3e9f411a36dc64bf2fc27e3009221dd2b8dd276a16863391ac6596193da368007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c7ef0e0ad0000040300473045022100da3552ab688cda9c87744b549ce759b2f95d7300e3821d4ae6f2fb9c71b83ba902202556d1e72feec5eba05d7001ec8ade39453f81a2e774fa0b7063a8c92270b159
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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