www.oscotech.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8a:25:4e:3d:44:24:df:e5:f8:54:23:bf:ec:5f:13:74:92 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.oscotech.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8a:25:4e:3d:44:24:df:e5:f8:54:23:bf:ec:5f:13:74:92
Serial Number (int): 308345412107995168512205853883023442015378
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ed:cc:88:8d:22:27:ad:f1:6e:22:c4:95:5a:e4:cc:07:2b:f9:09:79
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 27:10:51:26:de:b6:2f:7c:51:85:ce:5c:6f:37:1e:0d:f7:27:74:ba
Fingerprint (sha256): 12:ea:59:5a:bc:97:b9:27:61:33:e4:23:23:4f:f7:87:00:bb:0d:33:8e:1b:d8:20:1b:bb:4e:8c:a8:2d:2a:5f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.oscotech.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.oscotech.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.oscotech.co.uk

Other certificates including the domain name oscotech.co.uk

(limited to 100 certificates)
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk

Certificate

The complete raw certificate details for www.oscotech.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHDzCCBfegAwIBAgISA4olTj1EJN/l+FQjv+xfE3SSMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA2MDUwNzA2MTRaFw0x
ODA5MDMwNzA2MTRaMB0xGzAZBgNVBAMTEnd3dy5vc2NvdGVjaC5jby51azCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJFoWHMy9DcpwGNyh+2BASra5ukd
hHXfH2+45JIo2fJxLRaUImyLMuBP1enyO9ESmVzQRuGmU/30g72OVjwBEbKFDXAx
ppWW519Cb5+s1cNwWNMV6ajgTGMyu1+vuIQV9sxPXJ+D1igXNIdcHqXboq2b6j4x
6OzkdvO2VA7XLuRDjBBdR7/G/unnv/W7O5yjfpV1b9JSgVrpqEx4tusWUpni2r8g
Ft0pyGOs0TKiDvd5HuKOJ4OqBeGto17Lm9E6zpUpksAeHmYEVXzL1557IxujbV5E
odSiHhR2xVoUrgVu4doOcHz6xPdJBH6UtTxEtgF5YLg4f9ncJ8hsAspv964eOIJJ
CR+05QMsRUMtPA5dIxeoiPwRP2kqAM2Pah1QGqG3FEjEoR1aDCvYnEjASWqeredb
xQpUE4TBqGKgopQ1Enc2bsIAr+8oz9SsuDdfTW2cwrZ/CZJK8WpslGC8LEVzjbkB
1gAp6w26B86nSsqasJNTjom2EfvMjJfpK2HgUJvcPSxQDOVAzGyjG8bTMoAkiDYT
0C8RjeIVXcksapSjLJiSMMS0uavuIbdgkxpQbenS1ObdvZx7ZC6FdneA8wdfGxgd
yWoQqlcPEoNbL+dlxPDSIBNWgwPUHrWabX+rQmm4nPyVv8lIiJq/4JI/rkfOmrvq
lJlUZpuGLZAX7SPjAgMBAAGjggMaMIIDFjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FO3MiI0iJ63xbiLElVrkzAcr+Ql5MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISd3d3Lm9zY290ZWNo
LmNvLnVrMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB
1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsG
AQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQg
dXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3
aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRz
ZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA
dgDbdK/uyynssf7KPnFtLOW5qrs294Rxg8ddnU83th+/ZAAAAWPO+2+xAAAEAwBH
MEUCIQCUIKsHF1Rvehx+L+TrZ/+fFOaK4xWNmU5nlqfSJWj9wAIgYgwy9uhYMlxV
X8+ocy60uMegOswmTEYxNYHniokgV/YAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily
3KTDDPTlRUf0eAAAAWPO+2+iAAAEAwBHMEUCIQC2Tj9K0hk4Qbq8XafrmtbRatKr
kjyJn5AzJ9GMbSQ62AIgUoQNl7BixwHpQsP8Nw6Ur8zxPkO8sXSIpQJfvj19kDIw
DQYJKoZIhvcNAQELBQADggEBAJYyM13dypr5/99lFMoei+5iBJnugKGURoFxEKCI
mEwp+5q2ehFNzMx3ClB28HS+VnWIln4/Rht4748aq3z2vvr8Lne0uIlcGBG9cy+0
V69yy9RF+x01N5cw/vsdv7Epve4QSyWPno5U3HWNUPHqBVCBVHqQiz+TTJUk3vhv
eqxkra4Z9bdHuqR1FTXtZJU0V+tMFoYHp1mKi9RXrSYHI0n+q/Q6wl5xqj9v36g7
vX5Q+MYRmjk3PhqIBSdOvq5INaOwA3zE6x//e7qiaDKT599U+kjyWU4kvxTb6On1
8Lp0wyhc/9LV4VSkn+7aTwjNL8Ig2GXPo9u51IZ76pGdRcg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308345412107995168512205853883023442015378
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-05 07:06:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-03 07:06:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.oscotech.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 593211251315699609564154545864435104810999009500880007174871970155777377963351146825971070599997428799899554766610755540754969508687967430898357422749822312057709279442366836912392754159741678074599332568872003245874352061893996500603738270771407825685276522243790653423181289788242560758203515191319116711671899183411607272790576993287704823552777369385666088097578259109316127403691004082576405747266237266251104403826765304709228875190526044247081050435626151208117591270966186906954780097128577685272206767047152516593466046306164217879151713342037344953776154206359563697518572344122392157521316525261287708517952228927715561162535459723061221293153543135475380224929955739753837206014692530453524359910777864322134100638438661327978694382483338148307311573218410208051368327272658417767522241534853980967372503071363950816482450249419558529319208878135490984748155854505003779219033912167893191279590302846290783630992059643799213531256486184377761411052077027419848944121261483472872138905069085592842424987595091058531700292475713981975152017874679759377918701949018710673617885079612741843285967135142107304760915815958357844895996371598825778942131154291173117112000822139442668852333006931101541095688524437591887755158499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edcc888d2227adf16e22c4955ae4cc072bf90979
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oscotech.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163cefb6fb100000403004730450221009420ab0717546f7a1c7e2fe4eb67ff9f14e68ae3158d994e6796a7d22568fdc00220620c32f6e858325c555fcfa8732eb4b8c7a03acc264c46313581e78a892057f6007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163cefb6fa20000040300473045022100b64e3f4ad2193841babc5da7eb9ad6d16ad2ab923c899f903327d18c6d243ad8022052840d97b062c701e942c3fc370e94afccf13e43bcb17488a5025fbe3d7d9032
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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