caterhamschoolsociety.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cd:45:05:b6:88:8a:ca:2d:c2:d8:bc:45:2e:3b:12:19:14 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=caterhamschoolsociety.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:45:05:b6:88:8a:ca:2d:c2:d8:bc:45:2e:3b:12:19:14
Serial Number (int): 331186489409483108136247650729556844878100
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 83:b5:0e:d0:8c:bf:61:1c:0f:5d:bf:06:fc:cd:5b:6f:4d:36:86:20
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d4:ba:d0:b0:c1:09:c1:f3:f6:7d:d6:24:c9:db:6f:27:75:81:dc:74
Fingerprint (sha256): 25:4a:c5:d8:93:c5:e8:be:f2:e3:c5:97:97:1e:7e:68:32:4e:4b:1b:8b:54:ec:6f:40:b1:e3:bd:25:38:78:39

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate caterhamschoolsociety.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for caterhamschoolsociety.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

caterhamschoolsociety.co.uk
www.caterhamschoolsociety.co.uk

Other certificates including the domain name caterhamschoolsociety.co.uk

(limited to 100 certificates)
ucoconnect.com
ucoconnect.com
campionalumni.org
campionalumni.org
ucoconnect.com
campionalumni.org
community.mancosa.co.za
campionalumni.org
connected.cardiff.ac.uk
campionalumni.org
community.mancosa.co.za
challonershighnetwork.com
campionalumni.org
caterhamschoolsociety.co.uk
ucoconnect.com
campionalumni.org
campionalumni.org
cettalumni.com
caterhamschoolsociety.co.uk
campionalumni.org
caterhamschoolsociety.co.uk
campusnetzwerk.ac.at
cettalumni.com
campionalumni.org
campionalumni.org
campionalumni.org
colfesnet.com
campusnetzwerk.ac.at
campusnetzwerk.ac.at
campionalumni.org
campusnetzwerk.ac.at
campusnetzwerk.ac.at
campionalumni.org
campusnetzwerk.ac.at
campionalumni.org
challonershighnetwork.com
campionalumni.org
campusnetzwerk.ac.at
campionalumni.org
campionalumni.org
ucoconnect.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
m.caterhamschoolsociety.co.uk
campionalumni.org
caterhamschoolsociety.co.uk
campionalumni.org
charterhouseconnect.org.uk
campionalumni.org
campionalumni.org
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
connected.cardiff.ac.uk
campusnetzwerk.ac.at
caterhamschoolsociety.co.uk
m.caterhamschoolsociety.co.uk
challonershighnetwork.com
cettalumni.com
challonershighnetwork.com
m.caterhamschoolsociety.co.uk
ucoconnect.com
caterhamschoolsociety.co.uk
caterhamschoolsociety.co.uk
campionalumni.org
caterhamschoolsociety.co.uk
campusnetzwerk.ac.at
campusnetzwerk.ac.at
campionalumni.org
ucoconnect.com
ucoconnect.com
campionalumni.org
campionalumni.org
campusnetzwerk.ac.at
caterhamschoolsociety.co.uk
caterhamschoolsociety.co.uk
m.caterhamschoolsociety.co.uk
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
campusnetzwerk.ac.at
campionalumni.org
community.mancosa.co.za
corpusalumni.com
ucoconnect.com
community.mancosa.co.za
campionalumni.org
campusnetzwerk.ac.at
campusnetzwerk.ac.at
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
community.mancosa.co.za

Certificate

The complete raw certificate details for caterhamschoolsociety.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4OOKxDHcdBxsPORknnE
Mz7Lyio83Lq53epLM/caPLNSgAxnV4f4G47lSeZ+tllqANgsl5lPK5GfNGQu1oGE
z5vvrjDiN8W8wZn8OFX4BXcFppN1lDL/PoqO4dbLICs7JePPWd2OW6h4xRfkZW/7
8SYM6VkKQj7PLvRucLd3YuKgJuRBkmmQt5sSWrc8mykYr+uBiM1KQUbePY7nRVTi
4oykL0cRh3CRKN2XKQ59S+mMB9lp7ZH/MmixbnxPaVUg5jCYI4hhYhu1Suvz3aCe
/riiM+LgdyOusd33xhi4M7GiKHuBq999OWXYHIVp5HIkikxA60WU2E9tcHxNyLX5
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331186489409483108136247650729556844878100
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-02 07:01:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-31 07:01:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'caterhamschoolsociety.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16602090308815669979533561943459527524023190804768632154252539970473068940729872097480989143929097069817215528741701405423745503715536217727765455566507062797909031301790396390009109043712618075344546654347585999643252357858364779193960820046978437594783048729781517470220358867112826932585938034850026737337047688474889719922078042453074861050291185466763539394017545267558276589075343918418219435507340040659060334365282149786522650020307190738897657123460712825226838187423760694371211010823780935687175844927875786926252279205651376464258548548904432654371689772922528938621217824337431805342107129303096968476977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83b50ed08cbf611c0f5dbf06fccd5b6f4d368620
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterhamschoolsociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caterhamschoolsociety.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c5158de5a0000040300483046022100b0840deed19c737083f18fc1eba2865353b82273f590c9c364349ecbc09fff31022100dadca5d519853e1492cdc6ba14ef6a410629b0c9d4f20f82f935d9d8ab7d064b007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c5158de4d0000040300463044022018cae4abe4dab5c939a42c539825301ed7f79d55c5cd98a934a981c8ed4e6f2c0220632ac4ec3a6753c98bfb6c6042b7cf6dfb6551797c1bfef5534029ea434b73aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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