ukmerge.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e7:79:5d:fc:f7:0b:62:26:6c:0b:49:2c:9c:50:bf:b7:b2 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ukmerge.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e7:79:5d:fc:f7:0b:62:26:6c:0b:49:2c:9c:50:bf:b7:b2
Serial Number (int): 340103409155855442812027630003781504055218
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 17:8a:e1:eb:b9:d7:01:79:ec:94:ee:94:68:d1:54:58:94:3f:c5:0c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0a:4c:be:af:bf:ba:c6:50:15:c1:51:12:c3:95:a2:3c:24:25:e7:28
Fingerprint (sha256): 1e:f2:21:38:85:8b:bb:03:f5:a9:c1:a4:a8:a4:73:84:95:2e:37:5e:7c:1f:c5:1d:35:e5:72:d9:88:fb:00:c3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ukmerge.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ukmerge.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ukmerge.net
www.ukmerge.net

Other certificates including the domain name ukmerge.net

(limited to 100 certificates)
ukmerge.net
ukmerge.net
ukmerge.net
ukmerge.net
ukmerge.net
ukmerge.net
ukmerge.net
ukmerge.net
ukmerge.net
ukmerge.net
ukmerge.net
ukmerge.net
ukmerge.net
ukmerge.net

Certificate

The complete raw certificate details for ukmerge.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340103409155855442812027630003781504055218
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-21 01:16:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-19 01:16:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ukmerge.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 777459872495209993872376984552112662144115293752675128306648782246632546250392263942623633861317854243343169966577964826686706684439998882102233267134144667325890811926277292807309542918375910151930087052393714076671717208644418460058564686208952192801169582453486420911987302769731535179146120793671655328415048332571322875792580055538059290012463269939104306460314881308274773245153842813062941596380200694070525482426951611709388090229080064584469480734286713676900895907132531307314992352104176571226872182574528267541548177476706345340161050292372607208241017362969616316353986403228080043693009752923591742074083781245197227488901478639993425200618491204909627961800967826726981989320638547391905882351737211063554014344957434432249133528767896567705048883040403459951804029808627102658355226801568213212899203479372440417845891346966507124627497457503063817534901689316772234036111106873240432196676576241757766656548631620818816156670919218946790298120660768038132337840652252979721342676207602010655330523725217860351152289408280911061614434255998344613828182520818356158353619096246833807415779562820262102132375390525345119935143154442569079542242712721396729259122767965630084430576696517048022416364535207904860245923357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							178ae1ebb9d70179ec94ee9468d15458943fc50c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukmerge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ukmerge.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001669468e453000004030046304402204135592af0cb910762f2c0e6d8bedcdea57eba4b58bc2b337b53514ce92772bd022043070dcfc51db1adc6a76d7416c80b2e82263d4360e80d81fd2812d7be166240007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001669468e4490000040300473045022100cf3955060a16d96372bce1a0f36da701050d788d2ba6611edcb6ca7673c2427c02204efcd162377c588d0dda063073bdfe213d8a5a268a0d54d18c626bdec27cafed
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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