collections.gigacycle.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b1:f5:e2:38:dd:e7:49:42:c4:91:bc:b1:54:0a:10:65:29 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=collections.gigacycle.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b1:f5:e2:38:dd:e7:49:42:c4:91:bc:b1:54:0a:10:65:29
Serial Number (int): 321893672211740122557096260744233792595241
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cd:2f:f1:e3:e6:5a:e5:ce:f9:23:83:c1:b5:13:c7:82:cd:a5:1e:3d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ad:65:60:1a:e9:83:2c:38:3d:67:f8:ac:1f:ff:d6:0e:75:96:9b:e9
Fingerprint (sha256): 1f:43:96:0b:ae:79:7d:3c:ca:53:60:1a:f1:7f:e9:fb:c8:14:42:f5:84:50:48:e1:bb:1d:2a:bd:9b:07:c2:e5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate collections.gigacycle.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for collections.gigacycle.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

collections.gigacycle.co.uk

Other certificates including the domain name gigacycle.co.uk

(limited to 100 certificates)
www.gigacycle.co.uk
gigacycle.co.uk
gigacycle.co.uk
gigacycle.co.uk
collections.gigacycle.co.uk
gigacycle.co.uk
sni.cloudflaressl.com
news.gigacycle.co.uk
gigacycle.co.uk
gigacycle.co.uk
gigacycle.co.uk
news.gigacycle.co.uk
collections.gigacycle.co.uk
news.gigacycle.co.uk
news.gigacycle.co.uk
news.gigacycle.co.uk
gigacycle.co.uk
news.gigacycle.co.uk
news.gigacycle.co.uk
news.gigacycle.co.uk
news.gigacycle.co.uk
collections.gigacycle.co.uk
gigacycle.co.uk
collections.gigacycle.co.uk
gigacycle.co.uk
collections.gigacycle.co.uk
collections.gigacycle.co.uk
collections.gigacycle.co.uk
gigacycle.co.uk
collections.gigacycle.co.uk
news.gigacycle.co.uk
www.gigacycle.co.uk
collections.gigacycle.co.uk
collections.gigacycle.co.uk
collections.gigacycle.co.uk
collections.gigacycle.co.uk
news.gigacycle.co.uk
collections.gigacycle.co.uk
news.gigacycle.co.uk
gigacycle.co.uk
gigacycle.co.uk
gigacycle.co.uk
collections.gigacycle.co.uk
news.gigacycle.co.uk
collections.gigacycle.co.uk
gigacycle.co.uk
gigacycle.co.uk
news.gigacycle.co.uk
collections.gigacycle.co.uk

Certificate

The complete raw certificate details for collections.gigacycle.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrlTs6RsEmpgWoLgZPqD
lu0zAsp3ce9xfiMqw2WcVrecVPo1XCYoIjFmIlZqPi9I3IzSogV3IPLkjG1oXqXJ
AUmRytCmECcpDxo3ArfhdEUgQCj3vQ5YW0dmO3lL7ywJqk4eimM3kSiWWF/e3gtB
Y/hcA+E1c+RX3vV9CcVCWaCJLoJNcCg3Ou6RyjatmpVfBU9ZC5XBtzf8tBJeQSao
DKiNnfOfBNjLO1wPHIWV5xUTofene0OTJ+3HGI9+OrnAvHh+29Df+z5y5N2aXvju
PW4ZXuKqbvrRIOvZxusNVjCS4P8/nQAPf6j7Axr+OYFZuhHvjfKGrUBso1BTjVi/
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321893672211740122557096260744233792595241
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-19 18:22:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-17 18:22:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'collections.gigacycle.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22561806413954340165748794087155570165805584794633452569113651806329910217048250790841896674136844916413803594213999555854344762383556581637256175991592997020277592139036856423982629821380232873325690961989195484294579411489005733496269725892635398914185111880591267479393819434109217848523667119208895589933611323161857985545975381994692206266917430164852735878323023038760256730696080519596082876243536745214677385310116513766198098166965311830623586189834334719379932312508383647895662024089221173279304486076244102404586491002045109542851927952871734226322726510584575149023484775900388869896409697386414602764207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd2ff1e3e65ae5cef92383c1b513c782cda51e3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections.gigacycle.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000164b3fe1aa9000004030046304402200da10a9e81eb947bf8e78ecee72a065e255b641d4a085ae52cb104a8a5f82bb102202a88bf55166efcaab6aa0689acba40c6da95ebf8feff3f1ca2b2cd4b4c0d9108007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164b3fe1ab1000004030047304502206d188453c96cc3cd5b499e2aea9fe9cbb827c749c04484657f42d195fe4a9aae022100b0f47b6a400086eb2711141b34b560845502c12a6aaef63779cffde56ec87f8b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00054e0e07bc2e93696c582cea0cc6f524fd0690f0e56db2e57ac895fcbe1bfba7153f018d625ef5944758316c82c8c9d86b3bdb7e1911b434a782632e1aaa21c187780d960fc1fd7f434f0e658c16c56fc00c97acec27580ab16c019dd348ecb6bdfc3e7c8a9a9a42e51b80525325a92068530ad64c725e715118ff434b7e8b10d9ad2925a8f97597df6b8e5216b653b865b916ef3f7ca5954c32df1cea6fe9d8bd844e6019cd08cd513f0cc3a98b0efd7b1f1583769214797f95760b0420653fa7cbdcc5bc5e49e5c342352bc3359d3a9e8825d44343be5178a775c413d841a97326088c35478c0dfadb5d609923306ff8175c5ff67b1cb93a16ffcd217b9553