indigo-uk.com

Issued by R3

About this certificate

This digital certificate with serial number 04:51:45:55:d7:c3:30:e3:d1:b7:65:51:a1:6b:5a:5c:95:ab was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=indigo-uk.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:51:45:55:d7:c3:30:e3:d1:b7:65:51:a1:6b:5a:5c:95:ab
Serial Number (int): 376104177900761823954988542934170837226923
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bb:4d:94:1b:93:d8:7b:e1:f1:1e:ae:ab:19:7c:79:22:91:7b:c3:88
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bb:a1:58:bb:63:e6:fc:b8:a2:5b:cb:75:a0:0c:7a:00:b4:a3:0f:53
Fingerprint (sha256): 1f:26:31:0d:9a:cc:fb:d7:5c:e0:80:b0:39:97:af:2c:26:83:15:e7:0a:95:a5:bb:6b:09:5f:f4:65:1b:94:f4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate indigo-uk.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for indigo-uk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

indigo-uk.com

Other certificates including the domain name indigo-uk.com

(limited to 100 certificates)
www.indigo-uk.com
indigo-uk.com
www.indigo-uk.com
indigo-uk.com
indigo-uk.com
indigo-uk.com
indigo-uk.com
www.indigo-uk.com
www.indigo-uk.com
www.indigo-uk.com
indigo-uk.com
www.indigo-uk.com
www.indigo-uk.com
indigo-uk.com
indigo-uk.com
indigo-uk.com
indigo-uk.com
indigo-uk.com
www.indigo-uk.com
indigo-uk.com
indigo-uk.com
www.indigo-uk.com
indigo-uk.com
indigo-uk.com
indigo-uk.com
store.indigo-uk.com
indigo-uk.com
indigo-uk.com
www.indigo-uk.com
www.indigo-uk.com
www.indigo-uk.com
indigo-uk.com
store.indigo-uk.com
www.indigo-uk.com
indigo-uk.com
www.indigo-uk.com
indigo-uk.com
indigo-uk.com
www.indigo-uk.com
www.indigo-uk.com
www.indigo-uk.com
indigo-uk.com
indigo-uk.com
www.indigo-uk.com
www.indigo-uk.com
indigo-uk.com
www.indigo-uk.com
www.indigo-uk.com
store.indigo-uk.com
www.indigo-uk.com
indigo-uk.com
indigo-uk.com
store.indigo-uk.com
indigo-uk.com
indigo-uk.com
www.indigo-uk.com
indigo-uk.com
store.indigo-uk.com
indigo-uk.com
store.indigo-uk.com
indigo-uk.com
www.indigo-uk.com
www.indigo-uk.com

Certificate

The complete raw certificate details for indigo-uk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvRNaHIkzy6DKRE0+LvJ
cAz95JkOR9J6qC7JnMpth5lOhFsZsEy+Lb1OPFiQW8ib/l0xkUdozu9il3azpnw7
Lfb6Q/NwPuxUUi7DCj07UDCw2QRfKUYYf/SDxSaz4koioy95Al/dYRXET89HwO4w
bimIf7rnvZn4mlHqZ4hXR2XgHyfiNLB+/+YZ5Yg5uqkte5LbnpgsOofEPmlZDKAo
5A0h3T/vf8v8I7qJ0r+nilmcWuJzDi4LbNkzYl1uYmPj1GvSAm/lf2vRKxYzNJr9
oJXAKQcykI6tFZ1iveXjTRzYSu1pPMKpTS9Uy0W488uUHHMfXf+JqBLsMXScJJsO
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 376104177900761823954988542934170837226923
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-24 13:43:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 13:43:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'indigo-uk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26125560814082636891858548136872565466441711520937799932666167305919807626078171450839481872924036662937392169243140966745055471330603186593760739233274373870113636792611471692218579078736803972659163271073742854143081978476492964728499114304383016472932131419341664342214487316048918742027046272271420741049852767888239314462149430591926117096615885589636704581444410018625156561586484069698307236261503707863365465398151446374833057293064722816702271803553793810969684553123004667642927967460369825574303243956072795384278680919205004766764233448665343460499457368987790122970236034920077810535329018190434500546103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb4d941b93d87be1f11eaeab197c7922917bc388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indigo-uk.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b6223bc110000040300483046022100bc4d6f2ec2c8ef561bdff43841432810d9a63c16f876d18ac1c37dc269e9173602210083abd1c9413dbca73b3559592182ed79204d76e901c48b2bfaac67558d6bc4f600770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b6223bc480000040300483046022100ac324b490b553c9c3c168a0ae51787640baff2b6059830942f03429b5537f1ad022100cc31ca1f991419c75fa822740dfb6cb26d30f95c838847e4a29e85fcc2f4635a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00538bdde0429c9571c70b5ca21d701c39622f13dff60c082620e166907969567f3c7720d009ed864ada42edf57b931c04e5961e00eb7293b682d102ae9387c0c91ada9751bd55ae93cfd74177b30486a163fbeb3b444e2a383d17ce0a334ecdab04f737e13a500f0d58ae08d62881e19b8a2e572954de840eb2e01a077facc8bd44df2643f5348c485defd2d63f54b373b0b507d12c80a304627cdaea50cb0c6982f1cacae66e2b63dd7df54307c5f28a7a1caf5b94f137f9470b117117f815dc8fb960cef5772cfc2b4c827b72ff184a2b104b1ebdd9468a4abef27aeb0c009af769b73f296f3677f1668b397cb3ef5e7a0f898ce953159b814838bf71cb6e3d