data.southampton.ac.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:de:8c:f5:b1:b9:45:44:66:c5:aa:8f:f1:d9:de:05:61:36 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=data.southampton.ac.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:de:8c:f5:b1:b9:45:44:66:c5:aa:8f:f1:d9:de:05:61:36
Serial Number (int): 424179196820294701799785938061068842918198
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 81:14:b2:e7:85:c0:13:fc:e1:50:ca:b5:c7:4e:4f:11:1e:3d:14:ed
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e9:df:8a:86:65:db:9a:7b:3d:48:12:f0:54:ac:b9:79:0c:8c:68:de
Fingerprint (sha256): 0b:6d:25:da:4d:46:43:be:46:ec:d7:b9:91:c9:c3:37:c7:38:eb:59:6c:86:26:85:60:0e:2d:b5:b2:8d:1c:49

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate data.southampton.ac.uk

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for data.southampton.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

data.soton.ac.uk
data.southampton.ac.uk
www.data.soton.ac.uk
www.data.southampton.ac.uk

Other certificates including the domain name southampton.ac.uk

(limited to 100 certificates)
southampton.ac.uk
personal.soton.ac.uk
vesselnoise.soton.ac.uk
ais.southampton.ac.uk
data.southampton.ac.uk
jobs.soton.ac.uk
www.mytime.southampton.ac.uk
fshms-gradschool.southampton.ac.uk
store.southampton.ac.uk
giving.southampton.ac.uk
southampton.ac.uk
elearn.southampton.ac.uk
www.southampton.ac.uk
tls.automattic.com
personal.soton.ac.uk
arm.ecs.soton.ac.uk
room-occupancy.southampton.ac.uk
tls.automattic.com
data.southampton.ac.uk
*.dev.southampton.ac.uk
www.blackboard.soton.ac.uk
www.soton.ac.uk
maps.southampton.ac.uk
web-archive.southampton.ac.uk
caa.soton.ac.uk
calendar.data.southampton.ac.uk
southampton.ac.uk
elearn.southampton.ac.uk
www.maps.dev.soton.ac.uk
southampton.ac.uk
webscience-lexicon.southampton.ac.uk
my.southampton.ac.uk
southampton.ac.uk
ready4ecars.southampton.ac.uk
southampton.ac.uk
ais.southampton.ac.uk
www.data.dev.southampton.ac.uk
www.mindscdt.southampton.ac.uk
ready4ecars.southampton.ac.uk
jobs.soton.ac.uk
data.southampton.ac.uk
www.mindscdt.southampton.ac.uk
store.southampton.ac.uk
catering.southampton.ac.uk
tiles.maps.southampton.ac.uk
mle.southampton.ac.uk
inanophotonics.southampton.ac.uk
www.whatweekisit.dev.southampton.ac.uk
alumni.southampton.ac.uk
acecs.soton.ac.uk
www.southampton.ac.uk
www.soton.ac.uk
my.southampton.ac.uk
jobs.soton.ac.uk
elearn.southampton.ac.uk
southampton.ac.uk
catering.southampton.ac.uk
software.soton.ac.uk
www.events.soton.ac.uk
data.southampton.ac.uk
tls.automattic.com
giving.southampton.ac.uk
personal.soton.ac.uk
csa.southampton.ac.uk
personal.soton.ac.uk
jobs.soton.ac.uk
www.soton.ac.uk
tls.automattic.com
events.southampton.ac.uk
jobs.soton.ac.uk
www.visualisation.southampton.ac.uk
store.southampton.ac.uk
maps.southampton.ac.uk
www.southampton.ac.uk
www.soton.ac.uk
giving.southampton.ac.uk
giving.southampton.ac.uk
tls.automattic.com
www.southampton.ac.uk
tiles.maps.southampton.ac.uk
tls.automattic.com
drupal-corporate.soton.ac.uk
wipfab.southampton.ac.uk
store.southampton.ac.uk
tiles.maps.southampton.ac.uk
cdn.southampton.ac.uk
store.southampton.ac.uk
bus.southampton.ac.uk
lightwave.soton.ac.uk
tiles.map.soton.ac.uk
giving.southampton.ac.uk
www.mindscdt.southampton.ac.uk
tls.automattic.com
assessment.caa.soton.ac.uk
*.pprd.southampton.ac.uk
43am.southampton.ac.uk
reportandsupport.southampton.ac.uk
cyber.southampton.ac.uk
giving.southampton.ac.uk
accommodationservices.soton.ac.uk

Certificate

The complete raw certificate details for data.southampton.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424179196820294701799785938061068842918198
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-26 05:15:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-27 05:15:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'data.southampton.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 996880965687818301975240540921481553473464077249535008665464100723771956691243492879154328332806793617035637101228029425622344608656585352789079956162215635328856250734821765412307692453026038239444028339709269598539585970861796433712237392801436334121603862096307188814924649482940432478199208576744198542847872913034416654158805711795343150105784777758298012699231473013685585106847130628925197292322081478177055132438611077577640221499859757656208109101588270877846103734210107372685120362378037996932090017821597940639214084176624049364302941639455262388159014386894125980252022804877867823636528145797076734120734332053179630957569226526758367542451888239204659523581600678335440664197053663649985734059884030962876749001237234661316374390104814376332762991305544285719409394659828718994850846026059839815964657603922037864099797723353264305460589469568409543547300941546875264820815830439680409485960054599475316282134666964578396926069865676098255080304615444870220977613500147861059539276903215478365075812841654353510494767023664997489877482471196755480384421698047723700205583961628208658933666242834511959257654143308520990834286438372922576052212907324844297326314058541110747034543469580790565043338037337803656821774199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8114b2e785c013fce150cab5c74e4f111e3d14ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.soton.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.southampton.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.data.soton.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.data.southampton.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001868c5c4932000004030046304402200649ca5489a2e56d39ce71527ef62d199dee594615e4d83cac58b173f12899c20220132914ff090c67a7acb7765b688ddace5637114ba354d3de027e48ef9f9657870076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001868c5c494000000403004730450220601e6ad0da703bb0700fe579dfa3b162bf08c22f2e4210593998079f050b8919022100a2032a285350652246fcd6bb28afa5bfc5f39f0a9d44761a3c937adcebab1049
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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