somersetbeads.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:d7:dc:a0:85:e3:56:31:b7:41:8d:0a:d8:80:1c:c4:b6:da was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=somersetbeads.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d7:dc:a0:85:e3:56:31:b7:41:8d:0a:d8:80:1c:c4:b6:da
Serial Number (int): 421903116257184749285602776755584014530266
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 87:5d:e1:a0:8c:40:25:b9:1e:32:95:88:e7:e8:6f:7c:17:85:0e:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 40:60:1e:d4:ff:b4:12:92:d0:db:ff:3d:51:b3:3f:cb:5f:97:35:af
Fingerprint (sha256): 15:18:ca:ac:de:29:35:50:13:ad:e8:22:f2:2f:50:4f:e0:4b:0c:23:35:5b:0e:64:3f:e5:e6:33:e5:71:13:26

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate somersetbeads.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for somersetbeads.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

somersetbeads.co.uk
www.somersetbeads.co.uk

Other certificates including the domain name somersetbeads.co.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for somersetbeads.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxqOP1guslwWUpszhKzqI
ybU8x996QoAAbsTdUqB/hm0J8F3Ch098RgkfEHXl36QJ/pV8aw3WmbjIxxiVaSyQ
6sE5dWbtVmU4LTZoQW4tU8KtIdawmV14HXAly367tgDGrTydjJ51xPMSA/k4OlN/
wybv+bG5PzjGdoy76zEFEOVMoxoESDu8WDRgx4mcK6A2oBlzuaH/RvAK6LVcR7E0
52Zz8B9yaRmepn8emxwaoQrUlj3zKzqflASW0bmtsFBER8nki35SKg++cLNiww6A
vz9nQ57oLK6V+0UqY25FGpstklxmOhPK8ALuh0nN/4SpDimZDyIdfay1IJhXDD64
vcLcmxz8a4UWqSJPOTXNZ/YwdmTpm8ecECxzUMpUHkxunePA04r+1/nQOJMFkaa3
dKuS4smkgMmGjsnnzaqBYec6y2+CGZNTLTiuRovJ5vwt/qt8B7GpEF0//v0aw5AW
4X2KyDJM0kViqESGSNyf3urgEgkTRwOSjXxMwlw5bBqp6bOmcl8+UmucpDf96ZQR
Wx2yoGtTFuC1/OENj218F0EJPMclbhVskYQm4/aL1CsK8oTqe7ZOWoMhTBggb4Xj
OS5CdJKfdt8ozLHvF86qgX3Cq9vYNfirHwfjE7taVUG4ifVgQihiICtJPXiRqfeY
H5CxPhoeNkFhj/jc7bHs69MCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421903116257184749285602776755584014530266
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-27 23:10:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-28 23:10:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'somersetbeads.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 810376065199220745462622588182085749595708960502596761458451952620708433877764729670487318499467828240731117748323162192243678426935683623149660423328802465882166851783336503966673027448558409926081236396308385851422600876648007390789058456424671298950049169692510724307332244584066619961936599986852474035207827018787079619077983424196296697538816450768476824212869942771051652264811179620096479380792807406649058503029175031887516461455439973497150950676779588867984676350132381064438270311309173078561280286005822695342898606244325027150726795221026135164986804975220918006559517578253098150805535227145373476445619872728843980376421912480863321302082354638919919330617372021472065489323920566737368045653148629016293215910749854197637388096666887297362822978136987478689344755601843610607269355117021225008387839053898726991728688965996256237613468646913037940966525415344084124753243721218473227057665955353833483601235027999368273344833494824535756037285520024614365350431854118052101086136762276412943758536429537584080682988832198312664525365454285932083858723530808827771467312210286744938826225311055628339598401849010928051687983242757561845612758187916372775618731866976217340458963108381821271084247073140938653853084627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							875de1a08c4025b91e329588e7e86f7c17850e55
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somersetbeads.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.somersetbeads.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186955b4eba0000040300463044022041a833bbe6c91505eec44b651c2f16bc57e906373615d974962514ee3172b35f02203eb8731cbb21f7a70a7d6e8b7af8cdd6b604f1e9ff418a7c86d8a5552556646a0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186955b4ed200000403004730450221008ec8094b8168141b0affad27f2ffa281380c246232d50a599247d8f1eea94a6802203f2da9450bd5811aa635e92e310bbb30e369be33efb1e37a02750c05e7c0cbdc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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