birkett-smith.org.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:35:2f:8a:b8:e8:3b:a1:4c:2a:95:3a:d5:f4:e4:07:a5:13 was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=birkett-smith.org.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:35:2f:8a:b8:e8:3b:a1:4c:2a:95:3a:d5:f4:e4:07:a5:13
Serial Number (int): 279435017245221602743208239575653545387283
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 20:30:c4:0b:76:85:b7:e2:89:ff:46:8d:eb:56:45:ee:15:2e:45:ac
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4d:03:21:a0:6c:97:12:70:15:c2:ae:4a:42:ef:65:36:52:a1:6d:c3
Fingerprint (sha256): 15:fe:70:92:fa:39:e3:42:c0:b7:92:ce:fe:d9:5d:f5:49:bc:3f:e4:79:cd:88:cb:67:ab:0a:df:6c:53:cc:f1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate birkett-smith.org.uk

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for birkett-smith.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.crede-signo.co.uk
birkett-smith.org.uk
corstorphinesecurityedinburgh.co.uk
cpanel.birkett-smith.org.uk
cpanel.corstorphinesecurityedinburgh.co.uk
cpcalendars.birkett-smith.org.uk
cpcalendars.corstorphinesecurityedinburgh.co.uk
cpcontacts.birkett-smith.org.uk
cpcontacts.corstorphinesecurityedinburgh.co.uk
mail.birkett-smith.org.uk
mail.corstorphinesecurityedinburgh.co.uk
webdisk.birkett-smith.org.uk
webdisk.corstorphinesecurityedinburgh.co.uk
webmail.birkett-smith.org.uk
webmail.corstorphinesecurityedinburgh.co.uk
whm.birkett-smith.org.uk
whm.corstorphinesecurityedinburgh.co.uk
www.birkett-smith.crede-signo.co.uk
www.birkett-smith.org.uk
www.corstorphinesecurityedinburgh.co.uk
www.corstorphinesecurityedinburgh.crede-signo.co.uk

Other certificates including the domain name birkett-smith.org.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for birkett-smith.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SOEcJFdWU2RLPMbwju3
YDrC0r3xM/cbh98VPrBowgzIynG9z9JYCPv0p8neSeq2jmLI5J9m4V/AE1+fMTCh
30S4pKU7Ilf//etP1Y0nZ9J59WzYFrB1lQIi6U8oLADK1nDENFllxuCAkJIc6165
UZhEhpkQSwYFDDdCs2bO2i+2uCYNKOu/dADJT19gqOS28Gsg/CydL94F5AFTb4YK
AA7cu10dlf6KWBpZpiWd6qnwEueMMNtwRBk/gzlGGQfVubLDwLjla31UPp5Xk6Up
DeWcv/uCj0Hr76HGLvX5/PyOdXdxo4WGu2lpgZmGY5exwTRO3SNRJf/FnYJqdrML
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279435017245221602743208239575653545387283
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 17:41:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 17:41:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'birkett-smith.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26401319992331568710371515472650359342087708587905546618462021994165379323848182127920484777464391359505971032580954734565211013863449610008955794386266763783012379147779226569815656498333492081192961116335775295401301413560025063860292637082161224677538104322108685944597274661708156639931721410527197224507838425695539771685454092364899047726248902222382609407283583604635736276156334376551130034645709864475830331583502199907561370517397641518492206052318081609187470174901035712334750003229433276209638263693565666036867746911519161141911035607287715085114900881787234681669425340903672992656318136105131756948389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2030c40b7685b7e289ff468deb5645ee152e45ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (764 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crede-signo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birkett-smith.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corstorphinesecurityedinburgh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.birkett-smith.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.corstorphinesecurityedinburgh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.birkett-smith.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.corstorphinesecurityedinburgh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.birkett-smith.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.corstorphinesecurityedinburgh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.birkett-smith.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.corstorphinesecurityedinburgh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.birkett-smith.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.corstorphinesecurityedinburgh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.birkett-smith.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.corstorphinesecurityedinburgh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whm.birkett-smith.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whm.corstorphinesecurityedinburgh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birkett-smith.crede-signo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birkett-smith.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corstorphinesecurityedinburgh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corstorphinesecurityedinburgh.crede-signo.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e5d2b6f81000004030048304602210098ac66a242d893a2a0e61e21a9eb1082ab4ef9c3669081bd687c6ff1f16eafd1022100eda894dc3e52d52e27ca4890c4e8a188774cc00006bce4e4bf5e4ec9b1a6f201007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e5d2b6f93000004030046304402204dec116191790e87e4e09ef6913c1bffa6b7116e01ab15f64ad02c163e85142f022009a58eb0d4615d72c8c2684289244cc124d86852f335d8a1fc222769b0833524
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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