www.immunocore.com

Issued by R3

About this certificate

This digital certificate with serial number 03:cb:52:bf:87:db:31:8b:7b:4b:89:92:11:01:69:e2:53:10 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.immunocore.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cb:52:bf:87:db:31:8b:7b:4b:89:92:11:01:69:e2:53:10
Serial Number (int): 330524169460077188748605971030598792401680
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:48:a8:9a:cf:ba:6e:4c:25:8b:8b:bd:eb:01:68:e1:62:a3:1b:46
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 54:39:0c:dc:e4:54:13:c4:cb:a8:26:69:fe:13:86:af:8a:91:b9:be
Fingerprint (sha256): 0d:79:90:64:fb:0b:fa:8e:f8:18:6d:de:ba:86:e0:e3:9e:13:cf:f3:76:ee:f7:8d:b9:68:c6:7a:3a:46:d8:8c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.immunocore.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.immunocore.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

immncorp2001.thirtythreelive.co.uk
www.immunocore.co.uk
www.immunocore.com

Other certificates including the domain name immunocore.com

(limited to 100 certificates)
leapfrog-ssl-41.gcs-web.com
immuno.myzen.co.uk
vanity3.jiveon.com
leapfrog-ssl-41.gcs-web.com
vanity3.jiveon.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-41.gcs-web.com
www.immunocore.com
vanity3.jiveon.com
www.immunocore.com
vanity3.jiveon.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-41.gcs-web.com
immuno.myzen.co.uk
vanity3.jiveon.com
*.jiveon.com
vanity3.jiveon.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-41.gcs-web.com
www.immunocore.com
vanity3.jiveon.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-41.gcs-web.com
jobs.immunocore.com
immuno.myzen.co.uk
vanity3.jiveon.com
operations.tibbettsgroup.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-41.gcs-web.com
www.immunocore.com
leapfrog-ssl-41.gcs-web.com
vanity3.jiveon.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-41.gcs-web.com
www.immunocore.com
www.immunocore.com
immuno.myzen.co.uk
www.immunocore.com
leapfrog-ssl-41.gcs-web.com
operations.tibbettsgroup.com
leapfrog-ssl-41.gcs-web.com
operations.tibbettsgroup.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-41.gcs-web.com
vanity3.jiveon.com
leapfrog-ssl-41.gcs-web.com
akcoatings.com
*.jiveon.com
vanity3.jiveon.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-41.gcs-web.com
vanity3.jiveon.com
leapfrog-ssl-41.gcs-web.com
www.immunocore.com
leapfrog-ssl-41.gcs-web.com
jobs.immunocore.com
leapfrog-ssl-41.gcs-web.com
*.immunocore.com
operations.tibbettsgroup.com
akcoatings.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-41.gcs-web.com
akcoatings.com
vanity3.jiveon.com
jobs.immunocore.com
*.immunocore.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-41.gcs-web.com
*.jiveon.com
leapfrog-ssl-41.gcs-web.com
immunocore.com
jobs.immunocore.com
leapfrog-ssl-41.gcs-web.com
www.immunocore.com
www.immunocore.com
operations.tibbettsgroup.com
vanity3.jiveon.com
leapfrog-ssl-41.gcs-web.com
jobs.immunocore.com
*.jiveon.com
*.jiveon.com
www.immunocore.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-41.gcs-web.com
immuno.myzen.co.uk
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-41.gcs-web.com
vanity3.jiveon.com
*.jiveon.com
*.jiveon.com
www.immunocore.com
jobs.immunocore.com
leapfrog-ssl-41.gcs-web.com
vanity3.jiveon.com
leapfrog-ssl-41.gcs-web.com
immuno.myzen.co.uk

Certificate

The complete raw certificate details for www.immunocore.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sWcrnLCnFyc88HRq9Ex
fZBeqeZKQSOMh0l3+Xa9AnQcXWf5xv0ArpLm3lX1TpC/jBwleXSefkT2FgtYymb+
9S5ISv5/9odlhOgCt14Rnk3MrY6GylUFbnBeTXEQfmxq8QC5vkwfN32QXZyC1CCu
zEfFPBPmWB8gLAXXFG77L4+9QmByUgJ5chzKYqfSkan0B+6Yp7f1ND5LxF/+0ozG
Mz7stKT2aeYvu3PtYZDDuWVe89j5vrmqVsszZCk/haLjrPq+xopchLexnmv9RUiZ
VzoGMpB3GD4RsO3eaLQybgOpV+bmK2qf1Ubeah0yeCghno/kxAxlYG+fteM9zRk9
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330524169460077188748605971030598792401680
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 04:06:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 04:06:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.immunocore.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28627303049576517089477442410053129274742665894733476387482244011590725685738571669689673138426741581771432459923141051285192797220299703657066583989081398499892085025367926574546122830286395045146489482000499406771519473898077093259456363929408994340246060413129779420684311805111363316633407505603635713598922853896845274583658849706618403121429419520364111207229353119601631638739682116169441238103304983513992091954477827633998650010699289984506381867971103105636958839059531115795915411778160567050495353907842622296407733100733504981255073684537368892424633717071691214750706282365950547837807109770924688752089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2648a89acfba6e4c258b8bbdeb0168e162a31b46
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immncorp2001.thirtythreelive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immunocore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immunocore.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c0a05ad8e000004030048304602210084cf2605f090a0fcc8f1ddef287dab635828bc6a84718a8e59016c7fec192d01022100a573b0ab5c4f07268b0cf14b7bc6ad49bb29dbffa2479d7d6f14de0886f5037600770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c0a05add30000040300483046022100e57ed845e7da5b79e87004990638c42450db5bd78652c2008093b3515090e64b022100bfe86168355570a11f35e542964ae2c0171f87e338bfadbc43ba4017441f55ed
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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