www.greenlightinsurance.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:a0:4f:84:1d:2e:92:53:eb:f5:6f:17:92:0e:da:90:7b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.greenlightinsurance.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:a0:4f:84:1d:2e:92:53:eb:f5:6f:17:92:0e:da:90:7b
Serial Number (int): 329946702896756879491921953316189138227323
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:4c:a2:7f:e1:dc:2b:17:0a:29:51:39:a8:4e:ef:9c:85:1a:a2:2a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e1:40:08:b9:7a:c9:46:1f:b2:f6:0e:ca:6d:08:22:18:0e:90:0f:45
Fingerprint (sha256): 1d:46:f7:56:f3:6c:9b:fc:c5:b4:88:46:22:e1:47:67:c3:14:a8:0d:ee:11:5d:ed:88:6e:93:6e:99:e4:a6:9e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.greenlightinsurance.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.greenlightinsurance.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

greenlightinsurance.co.uk
www.greenlightinsurance.co.uk

Other certificates including the domain name greenlightinsurance.co.uk

(limited to 100 certificates)
www.greenlightinsurance.co.uk
secure.greenlightinsurance.co.uk
www.greenlightinsurance.co.uk
www.greenlightinsurance.co.uk
www.greenlightinsurance.co.uk
secure.greenlightinsurance.co.uk
www.greenlightinsurance.co.uk
secure.greenlightinsurance.co.uk
greenlightinsurance.co.uk
www.greenlightinsurance.co.uk
greenlightinsurance.co.uk
www.greenlightinsurance.co.uk
secure.greenlightinsurance.co.uk
greenlightinsurance.co.uk
greenlightinsurance.co.uk
greenlightinsurance.co.uk
greenlightinsurance.co.uk
secure.greenlightinsurance.co.uk
www.greenlightinsurance.co.uk
secure.greenlightinsurance.co.uk
www.greenlightinsurance.co.uk
secure.greenlightinsurance.co.uk
greenlightinsurance.co.uk
www.greenlightinsurance.co.uk
greenlightinsurance.co.uk
www.greenlightinsurance.co.uk
secure.greenlightinsurance.co.uk
greenlightinsurance.co.uk
secure.greenlightinsurance.co.uk
greenlightinsurance.co.uk
secure.greenlightinsurance.co.uk
greenlightinsurance.co.uk
www.greenlightinsurance.co.uk
greenlightinsurance.co.uk
www.greenlightinsurance.co.uk

Certificate

The complete raw certificate details for www.greenlightinsurance.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq37w1C4HTxywS1c9xpPg
1VLr8vR+/Fc4lx5fwikLnKdhu0bBo+KcJV6UGfctGHBmfW9BjWkne1iN44x8FYcr
Q1Qcc4TygUTDCg+dHIs2MH1R6YQA3LrGQIwGna5P0lWoj8UIZEWOIfKv6tyqRtqR
spkvCJLr8uBoZ4tMCH3alS4fHs0qars2wSk85EcLKF0lOEwQpIjYXXYodxmEEkjO
v5+fjfdMcSH3DaJs/asvFfh9yZZ3/gX7/drfghoeNXzOszRBBBGgL5Nj0OW+9xuv
rJn7CbXKjFSGoMDRVuEuWq3yZqxwk2bONfW2tRsKonq27KYaSrsIGPyZqlwr/I2v
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329946702896756879491921953316189138227323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-26 07:26:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-24 07:26:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.greenlightinsurance.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21649346959925021381944894271518011974973484979361056145494491159140554798315199963133960847688827274406233033287000374920379788642223329921931965917619551551186538770825637577850363020459073378733698144109362310616947395303211310283633914077548765415786668260743443313268881778528707033295647263344099065219518510439953939258149266566941667031618607246419709835596949405958008487387406761839243747433825620466309547643698047020843333854277454218329234609388492302963104911022452916255757803814747255430861210036072978073048741119606947856108388334375781952742485878735926950636373042814934681858006128838189974925129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							784ca27fe1dc2b170a295139a84eef9c851aa22a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenlightinsurance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenlightinsurance.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001657557aa4d0000040300483046022100d93c41d39c6f1e1a363bc24e32d84cb09b9554f591bf13360074c7b716688eac022100efcf06578ac0c82f57fc5e2104ac5549a6cca96a2dc45b7aa5046c31568e431f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001657557abb800000403004730450221009e8bf5f67f24ab353c418efab0de131973528b27c5a40062e3ac183be642b0bf02203371d39cf690a138e95ec3ea3b7c4cf528410cc3fbb356a77e3325214a90a8bc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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