bsfixings.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:c3:f9:37:13:6d:82:cc:91:40:03:f2:42:17:5d:87:ca:71 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bsfixings.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c3:f9:37:13:6d:82:cc:91:40:03:f2:42:17:5d:87:ca:71
Serial Number (int): 328023183086183536324606907187291193068145
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 51:29:c9:70:75:d6:7a:e7:f5:09:0b:46:36:2a:3c:60:f1:ae:2d:c9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 48:46:fa:17:b1:ee:b6:e0:ea:0a:eb:af:ba:2a:e3:d3:96:dd:6b:8d
Fingerprint (sha256): 2b:e2:51:3e:0c:90:73:a4:5f:52:72:99:04:74:41:1b:36:31:e2:f4:5c:8b:77:3a:86:2e:5c:ab:49:67:0c:99

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bsfixings.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bsfixings.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bsfixings.uk
www.bsfixings.uk

Other certificates including the domain name bsfixings.uk

(limited to 100 certificates)
bsfixings.uk
www.bsfixings.uk
bsfixings.uk
bsfixings.uk
www.bsfixings.uk
bsfixings.uk
www.bsfixings.uk
bsfixings.uk
www.bsfixings.uk
www.bsfixings.uk
www.bsfixings.uk
www.bsfixings.uk
www.bsfixings.uk
www.bsfixings.uk
www.bsfixings.uk
www.bsfixings.uk
www.bsfixings.uk
www.bsfixings.uk
www.bsfixings.uk
www.bsfixings.uk
www.bsfixings.uk

Certificate

The complete raw certificate details for bsfixings.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISA8P5NxNtgsyRQAPyQhddh8pxMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMTYwNjMwMTNaFw0yNDA0MTUwNjMwMTJaMBcxFTATBgNVBAMT
DGJzZml4aW5ncy51azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANb2
4itP7VL/Y4NnZq0z37nZjAnS0sYRjmI6M9PUyBLeoTM3OEooBOhy4yc62LrmdOfp
kzNNwLdxnscDq1tKTUgpahS+q/SSOfWLzXfd30H4bFuQiI4GYOaK2V8pe9/y8EBW
RfSDlCkTqwNjVT7q6RS4olGWj/mjRHoM0b1rJHxnR0hdEWpYlIdo7SYV1y3fX7N9
T4N/wns8pxhDq8OGqZi8OAQQvCFl0/PLRMMYFKmVP/WzmB7Dxu3vbw9Gh1vFwmG/
tXOaT3btBUeRh6Wb0f5ss9mFm83cTEsFBfHRXSr2LOk9wI68SnGDo1z/ecxWS4Av
Tnc82uTlB53hQr9D2DUCAwEAAaOCAiEwggIdMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUUSnJcHXWeuf1CQtGNio8YPGuLckwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA
5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu
by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w
KQYDVR0RBCIwIIIMYnNmaXhpbmdzLnVrghB3d3cuYnNmaXhpbmdzLnVrMBMGA1Ud
IAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcASLDja9qm
RzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGNES2JoAAABAMASDBGAiEA4pVk
bt0b6wqP9lQA2LfKatmUs1LtxEopXWk3tc3y43YCIQCADeWwhEujD2hw0ouLJ2sh
byKnSd0bzlvQbYMIGTCXSQB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h
+tQXAAABjREtiakAAAQDAEcwRQIgd391O9ybJNtn0be7TJVNXHyqfic+HIpksAGV
bpFdyc0CIQCFi9i+GK4gTkZQIhUw9OofFTDKXjWO2+oA8VXDPs4WRTANBgkqhkiG
9w0BAQsFAAOCAQEAf/1dl0ylNAxrx1HElAUjT5RamT1I/zlO3fVNTWPD751VqR7/
veBaHTNgTIShr9h0TO/4dSu5egypXg1eHQvOyZ4c5pu10mYGXRAin8+6WYrt9Czl
ikyyyj2eLqg1bubcPRobEOp0/edmeeUUUnegf4ynbyounMmSuvjXWV0jEAQcOEHh
AWylBVS2v+796/No3JPbnh+2ACMakZbIcAHB/x3U6pRo8fGjPfM2bBztIAloWsN/
Ki/dndg0frHXpzzxUagAXyO6hSTv1eAP4o9EoS6wOWCxUjLdXdU6oAu0wC/6bKUz
DdJMPVy7YXlN24e1GDYY9xh6YaFPl/UGklIT1w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vbiK0/tUv9jg2dmrTPf
udmMCdLSxhGOYjoz09TIEt6hMzc4SigE6HLjJzrYuuZ05+mTM03At3GexwOrW0pN
SClqFL6r9JI59YvNd93fQfhsW5CIjgZg5orZXyl73/LwQFZF9IOUKROrA2NVPurp
FLiiUZaP+aNEegzRvWskfGdHSF0RaliUh2jtJhXXLd9fs31Pg3/CezynGEOrw4ap
mLw4BBC8IWXT88tEwxgUqZU/9bOYHsPG7e9vD0aHW8XCYb+1c5pPdu0FR5GHpZvR
/myz2YWbzdxMSwUF8dFdKvYs6T3AjrxKcYOjXP95zFZLgC9Odzza5OUHneFCv0PY
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328023183086183536324606907187291193068145
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 06:30:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 06:30:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bsfixings.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27136740040881596644930339059985824307970856087988400093080131535362047697217435741981559661369585385183307556705258391380539551784992971391410913883937992356750261070426649282021292526772495582166630451495266929507643900804434005506291929207437991418824963709016828188384886529090229409223156848054828499326421568834493370919289167215938690659669900708040471959398669083658635584795367869446877532345707291075601598364206025571836039427022168167325955829845143188881602259007733847677992352558333065096393738814277756377259481270773778959150614588248528598755405272799031959928597248999622008717309295567076690483253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5129c97075d67ae7f5090b46362a3c60f1ae2dc9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsfixings.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsfixings.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d112d89a00000040300483046022100e295646edd1beb0a8ff65400d8b7ca6ad994b352edc44a295d6937b5cdf2e376022100800de5b0844ba30f6870d28b8b276b216f22a749dd1bce5bd06d8308193097490076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d112d89a900000403004730450220777f753bdc9b24db67d1b7bb4c954d5c7caa7e273e1c8a64b001956e915dc9cd022100858bd8be18ae204e4650221530f4ea1f1530ca5e358edbea00f155c33ece1645
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007ffd5d974ca5340c6bc751c49405234f945a993d48ff394eddf54d4d63c3ef9d55a91effbde05a1d33604c84a1afd8744ceff8752bb97a0ca95e0d5e1d0bcec99e1ce69bb5d266065d10229fcfba598aedf42ce58a4cb2ca3d9e2ea8356ee6dc3d1a1b10ea74fde76679e5145277a07f8ca76f2a2e9cc992baf8d7595d2310041c3841e1016ca50554b6bfeefdebf368dc93db9e1fb600231a9196c87001c1ff1dd4ea9468f1f1a33df3366c1ced2009685ac37f2a2fdd9dd8347eb1d7a73cf151a8005f23ba8524efd5e00fe28f44a12eb03960b15232dd5dd53aa00bb4c02ffa6ca5330dd24c3d5cbb61794ddb87b5183618f7187a61a14f97f506925213d7