wendy.ecs.soton.ac.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:ae:da:cd:c6:1c:92:f5:ab:4a:3d:fc:eb:21:dd:51:85:54 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wendy.ecs.soton.ac.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ae:da:cd:c6:1c:92:f5:ab:4a:3d:fc:eb:21:dd:51:85:54
Serial Number (int): 407949115713402362409663720088128491455828
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f0:7b:3e:87:6b:b5:8b:90:f8:b3:96:80:83:3b:d3:0d:b5:9a:4e:e5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c6:5a:5b:ae:b5:26:2b:50:30:df:52:11:2b:15:7e:5d:cd:80:db:03
Fingerprint (sha256): 0c:dc:13:80:fb:0c:5d:e1:6b:c5:7b:c3:48:cf:73:4b:6b:c3:23:a2:54:37:01:98:28:1e:fb:80:cc:55:fb:57

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate wendy.ecs.soton.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wendy.ecs.soton.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wendy.ecs.soton.ac.uk
www.wendy.ecs.soton.ac.uk

Other certificates including the domain name soton.ac.uk

(limited to 100 certificates)
outlookanywhere.exchange.devdomain.soton.ac.uk
survey.caa.soton.ac.uk
*.lifeguidewebsites.org
southampton.ac.uk
edshare.soton.ac.uk
status.dev.soton.ac.uk
cima.ecs.soton.ac.uk
www.edshare.soton.ac.uk
personal.soton.ac.uk
oesnet.noc.soton.ac.uk
www.assignments.soton.ac.uk
thz.soton.ac.uk
cco.geodata.soton.ac.uk
blogs.chem.soton.ac.uk
imap.ecs.soton.ac.uk
www.lifeguideonline.org
wegov.it-innovation.soton.ac.uk
www.adminservices.soton.ac.uk
www.feeintranet.soton.ac.uk
landss.soton.ac.uk
deepcholesterol.soton.ac.uk
go.soton.ac.uk
external.sharepoint.soton.ac.uk
game.ecs.soton.ac.uk
vesselnoise.soton.ac.uk
coursecast.soton.ac.uk
www.taster.ecs.soton.ac.uk
inteumweb.soton.ac.uk
corporate.wordpress.soton.ac.uk
teachingaccessibility.soton.ac.uk
moodle.ecs.soton.ac.uk
connect.devdomain.soton.ac.uk
srv01816.soton.ac.uk
www.cite.soton.ac.uk
smtp.soton.ac.uk
devecs.ecs.soton.ac.uk
edshare.soton.ac.uk
www.outlook.devdomain.soton.ac.uk
*.robpress.ecs.soton.ac.uk
pre-prod.jobs.soton.ac.uk
synote.soton.ac.uk
examtimetable.soton.ac.uk
www.payments.soton.ac.uk
www.idcard.soton.ac.uk
elanguages.soton.ac.uk
sharepoint.soton.ac.uk
fwa.soton.ac.uk
modulereportdev.soton.ac.uk
env.ecs.soton.ac.uk
www.wumtia.soton.ac.uk
placements.soton.ac.uk
qtt.phys.soton.ac.uk
qlikview.soton.ac.uk
pure.soton.ac.uk
cima.ecs.soton.ac.uk
www.it-innovation.soton.ac.uk
extreg.soton.ac.uk
www.onlinema.soton.ac.uk
baxendale.gofit.soton.ac.uk
doxygen.mountainsensing.org
sourcekettle.ecs.soton.ac.uk
www.outlook.soton.ac.uk
forge.ecs.soton.ac.uk
doxygen.mountainsensing.org
autodiscover.soton.ac.uk
www.shared.soton.ac.uk
www.payments.soton.ac.uk
webmail.soton.ac.uk
data.southampton.ac.uk
cima.ecs.soton.ac.uk
arm.ecs.soton.ac.uk
async.exchange.devdomain.soton.ac.uk
studyoverseas.soton.ac.uk
devecs.ecs.soton.ac.uk
*.it-innovation.soton.ac.uk
wendy.ecs.soton.ac.uk
jobs.soton.ac.uk
ise-psn3.netauth.soton.ac.uk
www.techsup.ecs.soton.ac.uk
cima.ecs.soton.ac.uk
srv00585.soton.ac.uk
www.som.soton.ac.uk
my2.pprd.soton.ac.uk
marc.ecs.soton.ac.uk
payrolldata.soton.ac.uk
iarss.soton.ac.uk
provenance.ecs.soton.ac.uk
humanitiesresearch.soton.ac.uk
planon.soton.ac.uk
logon.pprd.soton.ac.uk
orcid.soton.ac.uk
www.gradbook.soton.ac.uk
repec.soton.ac.uk
jenkins.ecs.soton.ac.uk
www.archives.soton.ac.uk
fshms-gradschool.southampton.ac.uk
nischr.soton.ac.uk
doxygen.mountainsensing.org
*.ext.soton.ac.uk
tryjoommf.soton.ac.uk

Certificate

The complete raw certificate details for wendy.ecs.soton.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407949115713402362409663720088128491455828
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-19 05:19:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-17 05:19:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wendy.ecs.soton.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 922018542898889080464453169142587585287899911295323386884481716968800581626162868893873774022130600662745787027302960535475607385449553963575176539931720832115357200090870871457461870753141531583843338082649828740000431711420030617518815173904083357314602167264353421429423068271653508642390781514099609310298779777394286861826312627134609473770375050232856482894091192191531510544507384155115279017001572572721231111442849444192087769664025751263110675496552154696403324695350034795717942769199923557131532797610207054422199700271002439444735140796553043283754285193348292745546115164209601798834026670284639474090458401881009422769739415868432122696336371794866327413833840977706615961401956164160363929988252531980540472333829042183708114858303200603561075137333028707910576566214265176494085803518908971686014461022607846036961272147733588040722748744290167840127834713498928097689807903906377665222147102168726736777633653394902868624223664297909602686048582478532533819000436011508269161645405840016979120430651101190580084286053733308950463244509673481806257008416994940919812211624010984702753630985499445831391850221533215543843590855843544513682505929632657770727451314823261827612496570623403244616357520004793552753381199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f07b3e876bb58b90f8b39680833bd30db59a4ee5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wendy.ecs.soton.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wendy.ecs.soton.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186f885e03500000403004630440220202d05bf81111a128fe57e90fd8005a4b933b5ca9f86a08bc8dd224e23233ac102200dc42cfd4f8fa8aced1ddf23f07f3535e7521e49958cf89832572a497adb9180007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000186f885e0530000040300473045022100f67755abd5dd554bf633385480cf220485a6a24d17ee472798b5d86bf2db1ce302206b3f3792b2e2f67b6fc807c93f785b1a90c0df485d11e9637cd189b06abc3fea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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