campaign.bbk.ac.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:29:08:e8:d7:13:a7:2b:80:64:82:d6:47:de:a4:87:51:dd was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=campaign.bbk.ac.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:29:08:e8:d7:13:a7:2b:80:64:82:d6:47:de:a4:87:51:dd
Serial Number (int): 275300277638151812808510690578976075108829
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c1:39:d3:f3:d2:b0:b3:d7:cd:e8:58:52:6c:96:2a:e3:06:ff:38:9b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a4:01:f1:89:00:8d:15:80:04:95:62:bb:6e:d2:f0:a8:5b:e2:9d:74
Fingerprint (sha256): 0e:2c:2e:48:5d:30:83:cd:fd:b4:5c:d6:1d:84:df:a2:fa:c6:9d:e4:e2:64:eb:2d:8d:d5:0c:e4:da:8d:ab:89

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate campaign.bbk.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campaign.bbk.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bbk.production.wearesmile.com
campaign.bbk.ac.uk

Other certificates including the domain name bbk.ac.uk

(limited to 100 certificates)
shame.bbk.ac.uk
apw01.its.bbk.ac.uk
vpn.dcs.bbk.ac.uk
moodle.bbk.ac.uk
www.dcs.bbk.ac.uk
www.dcs.bbk.ac.uk
web-test.its.bbk.ac.uk
media.bbk.ac.uk
*.cryst.bbk.ac.uk
www.bbk.ac.uk
eprints.bbk.ac.uk
sd2.its.bbk.ac.uk
fort.bbk.ac.uk
csi.bbk.ac.uk
www.19.bbk.ac.uk
moodle.bbk.ac.uk
*.ezproxy.lib.bbk.ac.uk
populus2.ccs.bbk.ac.uk
campaign.bbk.ac.uk
exchange.bbk.ac.uk
sim.openlibhums.org
populus2.ccs.bbk.ac.uk
olh.janewaysharedhosting.com
www.cbcd.bbk.ac.uk
sitr.mda.bbk.ac.uk
psyc.bbk.ac.uk
fort.bbk.ac.uk
shame.bbk.ac.uk
populus2.ccs.bbk.ac.uk
www.19.bbk.ac.uk
cis7.bbk.ac.uk
www.19.bbk.ac.uk
olh.janewaysharedhosting.com
pyrus.ccs.bbk.ac.uk
owa.bbk.ac.uk
lists.bbk.ac.uk
kif.dcs.bbk.ac.uk
fort.bbk.ac.uk
www2.bbk.ac.uk
vpn.dcs.bbk.ac.uk
zendto.its.bbk.ac.uk
puck.mda.bbk.ac.uk
sable.psychology.bbk.ac.uk
moodle.bbk.ac.uk
bisa.bbk.ac.uk
readings.bbk.ac.uk
eprints.bbk.ac.uk
cis6.bbk.ac.uk
populus2.ccs.bbk.ac.uk
side.mda.bbk.ac.uk
*.cryst.bbk.ac.uk
www5.bbk.ac.uk
pan.dcs.bbk.ac.uk
www.bbk.ac.uk
side.mda.bbk.ac.uk
briccentre.bbk.ac.uk
www4.bbk.ac.uk
wiki.bbk.ac.uk
www.19.bbk.ac.uk
olh.janewaysharedhosting.com
sim.openlibhums.org
populus2.ccs.bbk.ac.uk
cis-dev.bbk.ac.uk
app5.its.bbk.ac.uk
*.cryst.bbk.ac.uk
jarmanlab.bbk.ac.uk
fryitvpn.bbk.ac.uk
www.cbcd.bbk.ac.uk
*.ezproxy.lib.bbk.ac.uk
www2.bbk.ac.uk
www2.bbk.ac.uk
side.mda.bbk.ac.uk
uag.bbk.ac.uk
outlook.dcs.bbk.ac.uk
www.ict2012.bbk.ac.uk
kif.dcs.bbk.ac.uk
cis-dev2.bbk.ac.uk
sim.openlibhums.org
olh.janewaysharedhosting.com
wiki.bbk.ac.uk
uag.bbk.ac.uk
gandaki.bbk.ac.uk
tyto.ccs.bbk.ac.uk
tyto.ccs.bbk.ac.uk
*.cryst.bbk.ac.uk
media.bbk.ac.uk
side2.mda.bbk.ac.uk
smtp.dcs.bbk.ac.uk
cis.bbk.ac.uk
pyrus.ccs.bbk.ac.uk
zendto.its.bbk.ac.uk
www.survey.bbk.ac.uk
media.bbk.ac.uk
apw03.its.bbk.ac.uk
cis6.bbk.ac.uk
readings.bbk.ac.uk
pyrus.ccs.bbk.ac.uk
kif.dcs.bbk.ac.uk
psyc.bbk.ac.uk
dev.moodle.bbk.ac.uk

Certificate

The complete raw certificate details for campaign.bbk.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275300277638151812808510690578976075108829
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-13 07:39:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-11 07:39:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campaign.bbk.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 739900745712665051917346450123685815253345288314332145267380354179339384494803483725732948149113236782860777246042097155891047138542158939522074869689274610471915484008126348791662670466821601045380191568663212499729664917565408985679473700362013350882248896547498631054041349340649619026680770407050550042172216488959022407895978705383232085825395953901330051612097378682593815219424668206755523280287459397892924321874209387536714630646989460770000643991356348696193266421603888073459479750398315624882573718090288599590787726621407217458395569102346863726485897065838159228003674656509618537979437783067257102228495814130343987796232622393447973365783072657181038526677442195661079118279049989605202545758608590869778056936301898329309550712354794251168518186381723180430061134518798282475911937942732687423063286500265595864444900877965302834137042339160975933484836212456995422707225006066242145603529706240371428469100217372644368810281137930167722592601831920198210490985291178877008182203104666803868328850733727187295026543519838891270781532315298033188080274377438046039145132420707021761157706433890254119394419341141688966927661563879141604048551546137717053524657941190616060730457123364227309163125648528446408711320769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c139d3f3d2b0b3d7cde858526c962ae306ff389b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbk.production.wearesmile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.bbk.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186da200fc7000004030046304402205403f784fbe5924cb538b2838f7b609cbdc9fa432e591959e6821e75dab1993e02207a2df199190ff9949bb81e81e126030f7a3a37fa9edb90e42e5dfa12b6178c1d007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186da200f5f000004030046304402203e359e7ce7606bcdf1e7ea7f236f5b07550e9d0da723939336202c69b994cc5e02207833dc13241c3421664baacf8a898d8d15858f58bc9c6c250fbdfe0650970608
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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