nexus.dev.hub.fco.gov.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:91:16:4f:7d:ac:c6:f6:28:f4:85:8a:0d:d5:48:66:72:96 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nexus.dev.hub.fco.gov.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:91:16:4f:7d:ac:c6:f6:28:f4:85:8a:0d:d5:48:66:72:96
Serial Number (int): 397819742686926176219285261721688133235350
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ba:16:d1:9b:fe:11:fa:a8:c7:5c:79:6a:62:58:dd:e9:d0:ff:64:e5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 44:a2:b6:4e:1e:fa:8a:56:81:ff:af:b1:d0:35:ad:9e:49:59:50:a2
Fingerprint (sha256): 13:b6:9e:12:6f:16:8f:ad:15:b1:03:a5:86:10:c3:59:c7:df:8b:a9:13:59:d9:38:92:46:81:db:bc:2d:fc:8e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nexus.dev.hub.fco.gov.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nexus.dev.hub.fco.gov.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nexus.dev.hub.fco.gov.uk

Other certificates including the domain name fco.gov.uk

(limited to 100 certificates)
protocol.fco.gov.uk
blogs.fco.gov.uk
blogs.fcdo.gov.uk
blogs.fcdo.gov.uk
gitlab.dev.hub.fco.gov.uk
vle.fco.gov.uk
api.cistest.fco.gov.uk
vle.fco.gov.uk
nexus.dev.hub.fco.gov.uk
securelogin.wifi.fco.gov.uk
crisis.hub.fco.gov.uk
link.cistest.fco.gov.uk
vle.fco.gov.uk
vle.fco.gov.uk
pyramiddr.fco.gov.uk
api.cistest.fco.gov.uk
vetting.fco.gov.uk
*.myna.fco.gov.uk
ci.crisis.dev.hub.fco.gov.uk
*.hub.fco.gov.uk
mx.ppe.fco.gov.uk
*.visa4uk.fco.gov.uk
blogs.fcdo.gov.uk
nexus.dev.hub.fco.gov.uk
vle.fco.gov.uk
vetting.fco.gov.uk
*.hub.fco.gov.uk
www.chevening.fco.gov.uk
jira.dev.hub.fco.gov.uk
confluence.dev.hub.fco.gov.uk
sip.ppe.fco.gov.uk
blogs.fcdo.gov.uk
web-analytics.fco.gov.uk
ci.crisis.dev.hub.fco.gov.uk
*.sharepoint.cloud.fco.gov.uk
blogs.fcdo.gov.uk
protocol.fcdo.gov.uk
servicenowtest.fcos.gov.uk
crisis.hub.fco.gov.uk
*.fconet.fco.gov.uk
nexus.dev.hub.fco.gov.uk
terminal.fco.gov.uk
vle.fco.gov.uk
*.fconet.fco.gov.uk
portal.wifi.fco.gov.uk
internationalmedia.fco.gov.uk
www.locate.fco.gov.uk
servicenowtest.fcos.gov.uk
protocol.fcdo.gov.uk
nexus.dev.hub.fco.gov.uk
hspinternet.fco.gov.uk
*.visa4uk.fco.gov.uk
jira.dev.hub.fco.gov.uk
*.estate.fco.gov.uk
blogs.fcdo.gov.uk
*.estate.fco.gov.uk
protocol.fco.gov.uk
ist.crisis.hub.fco.gov.uk
exercise.crisis.hub.fco.gov.uk
hspinternet.fco.gov.uk
web-analytics.fco.gov.uk
jira.dev.hub.fco.gov.uk
ftp.bacs.services.fco.gov.uk
*.os-insight.fco.gov.uk
*.visa4uk.fco.gov.uk
exercise.consular.hub.fco.gov.uk
vle-test.fco.gov.uk
uat.crisis.dev.hub.fco.gov.uk
protocol.fco.gov.uk
protocol.fcdo.gov.uk
vle.fco.gov.uk
local.crisis.dev.hub.fco.gov.uk
transfer.cistest.fco.gov.uk
etdc.cis.fco.gov.uk
exercise.crisis.hub.fco.gov.uk
*.fco.gov.uk
crisis.hub.fco.gov.uk
blogs.fcdo.gov.uk
protocol.fcdo.gov.uk
sts.ppe.fco.gov.uk
ist.crisis.hub.fco.gov.uk
crisis.hub.fco.gov.uk
protocol.fco.gov.uk
blogs.fcdo.gov.uk
blogs.fco.gov.uk
api.cis.fco.gov.uk
*.visa4uk.fco.gov.uk
wasp.wifi.fco.gov.uk
portal.estate.fco.gov.uk
pyramid.fco.gov.uk
protocol.fco.gov.uk
pyramid.fco.gov.uk
jira.dev.hub.fco.gov.uk
*.consular.fco.gov.uk
nightly.crisis.dev.hub.fco.gov.uk
*.hub.fco.gov.uk
exercise.crisis.hub.fco.gov.uk
nexus.dev.hub.fco.gov.uk
nightly.crisis.dev.hub.fco.gov.uk
estate.fco.gov.uk

Certificate

The complete raw certificate details for nexus.dev.hub.fco.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397819742686926176219285261721688133235350
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-29 23:04:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-27 23:04:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nexus.dev.hub.fco.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 979692800007579015531206143194475326178444827114770796428701982058794419924364359014153177068066485641810111667663573546483780576958684392723740404183154650018356540954748394108655628671170545144960687037919522947634349667892252231028385553291561271242807543362290282380351770961783072213325461554214606162458682081532487401356531662056727677186654043175095936458183990331675567868588946914735893161116796362090928669568580109094225089178298069504302546619522155310975616556723541416966569693422515156906919876000475842895025068683395673728699133644093034369248876461236622321063964656871680825677703695384380591897460309081430896654785029393737766282060928900271877596218009175002794878948646825134344110046888683415609779209775854212087759683261787477372619954923427555554739959337910591231644165572889101022534020466977869712451786074117117509297809284733006750243678246096224189708691828716948719512126294548323007388695124475869349148672708085597820758324295807280725461791859175216904773050571294134478704288174250115352644472291674660872885546343515247517040600087750903353692015398252633042943259991204710714407826168521244556451281802709609917248040590207327307232252579633612181615046212778506845527253774759387562801876269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba16d19bfe11faa8c75c796a6258dde9d0ff64e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexus.dev.hub.fco.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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