help.apprenticeships.education.gov.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:03:77:49:6d:ba:2c:27:f4:1f:a6:d3:12:c8:94:88:f8:28 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=help.apprenticeships.education.gov.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:03:77:49:6d:ba:2c:27:f4:1f:a6:d3:12:c8:94:88:f8:28
Serial Number (int): 349628550222505630675243796614004121073704
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 96:bb:f0:80:b8:0a:69:1f:57:4b:f7:d8:da:35:74:38:b3:c2:b0:c3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 04:55:5d:e3:e9:4b:bf:8e:44:b7:f1:d6:0a:33:94:21:0d:d8:d7:3c
Fingerprint (sha256): 0a:7a:3c:e6:9d:86:00:dc:2e:02:00:96:59:e4:10:74:73:87:96:13:ac:bf:ff:10:d6:e8:9c:a9:84:66:c3:39

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate help.apprenticeships.education.gov.uk

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for help.apprenticeships.education.gov.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

employers.tlevels.gov.uk
esfahelp.education.gov.uk
help.apprenticeships.education.gov.uk
support.tlevels.gov.uk

Other certificates including the domain name education.gov.uk

(limited to 100 certificates)
ilsype.education.gov.uk
complete.education.gov.uk
fsm.education.gov.uk
cipdev.docs.platform.education.gov.uk
bfr-pp.education.gov.uk
plan-your-grant.education.gov.uk
Pr-nndr-scanservice.education.gov.uk
Report-extremism.education.gov.uk
caaradmin.education.gov.uk
onlinecollections-preprod.education.gov.uk
manage-training-for-early-career-teachers.education.gov.uk
www.keytosuccess.education.gov.uk
operations.platform.education.gov.uk
education.gov.uk
oat-api-services-fcs.education.gov.uk
dev-api-customerengagement.platform.education.gov.uk
gg-auth.education.gov.uk
test.docs.platform.education.gov.uk
applyforerasmusgovernmentguarantee.education.gov.uk
pp-ws.lrs.education.gov.uk
ssl809275.cloudflaressl.com
apim-find-epao-api.apprenticeships.education.gov.uk
traineeteacherportal-dv.education.gov.uk
consult.education.gov.uk
api-lrs.education.gov.uk
*.education.gov.uk
*.traineeships.education.gov.uk
dev-api-customerengagement.platform.education.gov.uk
idp.lrs.education.gov.uk
consult.education.gov.uk
schooljobs.education.gov.uk
console.apprenticeships.education.gov.uk
publish-teacher-training-courses.education.gov.uk
findapprenticeshiptraining-api.apprenticeships.education.gov.uk
dms-information-exchange.education.gov.uk
section96.education.gov.uk
apim-ltm-api.apprenticeships.education.gov.uk
publish-teacher-training-courses.education.gov.uk
test-api-customerengagement.platform.education.gov.uk
ilsype.education.gov.uk
doat-web-operations-fcs.education.gov.uk
admin.apprenticeships.education.gov.uk
proxy.signin.education.gov.uk
apim-fun-api.apprenticeships.education.gov.uk
approvals.providers.apprenticeships.education.gov.uk
api-services-fcs.education.gov.uk
teacherservices-pp.education.gov.uk
schoolexperience-staging.education.gov.uk
pp-lrs.education.gov.uk
consult.education.gov.uk
lrspaas-test08-idp.dev.lrs.education.gov.uk
apply-the-service-standard.education.gov.uk
lrs.education.gov.uk
traineeteacherportal.education.gov.uk
idp.lrs.education.gov.uk
idp.lrs.education.gov.uk
consult.education.gov.uk
transfers-api.apprenticeships.education.gov.uk
help.apprenticeships.education.gov.uk
www.ecs2.education.gov.uk
collectdatauat.education.gov.uk
www.keytosuccess.education.gov.uk
cmp-lrs.education.gov.uk
ur1-idp.lrs.education.gov.uk
test.docs.platform.education.gov.uk
nca-pr.education.gov.uk
assessors-api.apprenticeships.education.gov.uk
lrspaas-test01.dev.lrs.education.gov.uk
sni1c3d7gl.wpc.edgecastcdn.net
signin.education.gov.uk
schoolexperience-ta-recruit.education.gov.uk
clauat.education.gov.uk
doat-api-services-fcs.education.gov.uk
adt.apprenticeships.education.gov.uk
dev-api-customerengagement.platform.education.gov.uk
fsm2.education.gov.uk
status.apprenticeships.education.gov.uk
forecasting-api.apprenticeships.education.gov.uk
apply-for-qts-in-england.education.gov.uk
studentbursary.education.gov.uk
*.industryplacementmatching.education.gov.uk
dfe-hradvice.education.gov.uk
teachingjobs.education.gov.uk
education.gov.uk
sfs-dev.dev.funding.education.gov.uk
signin.education.gov.uk
subscriptions.apprenticeships.education.gov.uk
mta-sts.service.education.gov.uk
tasks.apprenticeships.education.gov.uk
pensionsregulator-api.apprenticeships.education.gov.uk
efadatacollections-stg.education.gov.uk
*.dev.lrs.education.gov.uk
help-for-early-years-providers.education.gov.uk
pp-services.signin.education.gov.uk
collectdatauat.education.gov.uk
refdata.apprenticeships.education.gov.uk
proxy.signin.education.gov.uk
ssl809273.cloudflaressl.com
status.apprenticeships.education.gov.uk
api-calculate-funding.education.gov.uk

Certificate

The complete raw certificate details for help.apprenticeships.education.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349628550222505630675243796614004121073704
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-02 23:46:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-30 23:46:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'help.apprenticeships.education.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764927071653253842773556121744216800450425709104959425377139871827065431745641268431025152764637752277602621395082763005027016096168880178829599940653063214463259776639288725242431654256502865851747771798877377939135045451832307697847691683322435394151556881123116782606445214408227150719505755805153464801493937725647909177010460238054039175337665808126049455343430516940318464790408782466863341046006016982726318847888848981975477663443271184492779966702965171311165625464328694796039451492689500351007620054795344395694897420811451517935492462739300159170277644933396275939419837993129506135639070003301809680528567971762230221223054433310969835507041217353685047608684254439660839039856511847668287359722633839415633833109314856620681186729335360397051354480677723655355782196620770811398328228937389636852844410593803509043119261116138055541877375536737887805841048904895396587758943895897035228967283194821561515007828006792045489305142154283256219353349502388581703332600803105105976535543109809582780845456223899333023859517804408668360316698914287394862062645340665279229569235261296396246531730303119334409886216763451639077162075132230086191756354812610865005551546985067159408145621015256748223544063965458559957145348321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96bbf080b80a691f574bf7d8da357438b3c2b0c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employers.tlevels.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esfahelp.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.apprenticeships.education.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tlevels.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000181c1865ba00000040300473045022063f8dbecc11c4328fa2e4ea90ed5fef00e3c17625b4b7dd09426730e6d43ebad022100c9510b5a5cc9869862bb7b51364fc38e6731bf8163a39cc60926b92a954fc3170076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000181c1865c2f0000040300473045022100881038367a67d3a3b3a81e27a728f529ba40b85b29db57d9b04a229d3e080570022076dd63b2596bf18db1f21200ec88db49e3f25c1055e620bd364e566c0a17e869
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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