fia.libf.ac.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:49:b2:99:19:4d:47:2b:59:ba:16:a0:26:35:a5:39:97:12 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fia.libf.ac.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:b2:99:19:4d:47:2b:59:ba:16:a0:26:35:a5:39:97:12
Serial Number (int): 286414868098361153074823102913288831866642
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:1d:6e:d6:c6:6a:42:87:49:25:7e:cc:be:20:ba:50:5b:fc:4d:a1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): be:24:6a:5a:7c:48:a6:eb:f5:4c:24:68:3c:3c:b3:8d:72:63:61:ba
Fingerprint (sha256): 32:46:4f:c4:a3:ce:4d:9b:4d:6c:a8:80:13:fc:86:e1:4b:13:e0:95:23:8b:db:4e:1c:e3:a7:93:04:be:ab:8f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fia.libf.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fia.libf.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fia.libf.ac.uk

Other certificates including the domain name libf.ac.uk

(limited to 100 certificates)
jira.libf.ac.uk
lf-droner.dk
etest.libf.ac.uk
learn.libf.ac.uk
brightspace.libf.ac.uk
static.jexport.ci
fia.libf.ac.uk
libf.ac.uk
brightspace.libf.ac.uk
townhero.ru
*.libf.ac.uk
app-dev.nuna.ai
actioniq.ideacloud.com
brightspace.libf.ac.uk
canmail.libf.ac.uk
digital.libf.ac.uk
fia.libf.ac.uk
authlink.trouve.noren.io
libf.ac.uk
fia.libf.ac.uk
admin.coastlinesolutions.com
learn.libf.ac.uk
www.thecouponcalculator.com
fia.libf.ac.uk
fia.libf.ac.uk
libf.ac.uk
*.libf.ac.uk
*.iu.org
*.libf.ac.uk
*.libf.ac.uk
onlinedegree.libf.ac.uk
learn.libf.ac.uk
oasis.libf.ac.uk
learn.libf.ac.uk
lonmail.libf.ac.uk
fia.libf.ac.uk
app.upbycellance.com
careanalytics.co.uk

Certificate

The complete raw certificate details for fia.libf.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286414868098361153074823102913288831866642
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-01 19:15:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-30 19:15:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fia.libf.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 858923875077964389997647469806563926501402849767451908190689099151065951126524038141780498691362417293279181155778440064229329218378808177649724986369814689109348282800464102723722915215234615059749256973016908697245934435741506189988729662389442004155322092943322651104138479814863094067960714744068794435951398376549467318375546470580797340086398896216124845671738275068867844301310525931597834911111133381436101292665608230010931881622040393824372639412701217806881596171563150877707266716896410115653136185325248006206148528602965723398789264698671247772239827434915270432284732553778484312791980250432371756871883855198887411074864680130289518811151528086235726385206747328100835495287518325183726336040262595440014107603847291204147668130050018619089160611615443845553624040957654356688355126276720308721673283457097936221398780209582062859766938972947093572360883475840641691155477626386788999482894880429768864251388707122772483804985703553721508070247811248530555037760546475145116984824790983118787282963851390107515802415853567890685517567789812934287847428853497782231594848128043076222150182798897274074044812007335427639781797608750665182324691948206591653160577102113218037100680530537549171814628741605341986967730997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							071d6ed6c66a428749257eccbe20ba505bfc4da1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fia.libf.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001713762ba0b00000403004730450221008bac49212e490d2fef2af9b4413d85cb3bbb99c6f74c5582e3d4683bdea4142602201d612d925d28136dd56a02a1018aeefeac7c51b3255517d1bd74ce4ae1adc7fe00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001713762ba360000040300473045022024130c502e939214dc11300cf81482df7cd4d23a0c25ba2e820c035e805695c3022100e546abed6b3c61c7aef3ffea206b8a0da12d152dc105880c5809531ffaa0b901
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0057c7ec595b5c3a150af591c16a8d6d9931bd023cf5ed15b34ae91449832358d063043d0fd1304ae69a7070fa5692c512c0870152235947454ffd3926b6f4284f440189e4004eed5a77620b39061b8b0487dd004dd41ec15c89aa12793652c27e3609be1d16166f8a607794b11297b4652d28916db0b98ed12c4a09e0484d85da0eb71b18ed93e8361de36932afc8a878c5071367d3e2f02b7c6e70fa92bc9f259eae7d416e95c1a0ba747451acd821a2458703794dd4b7f99c610e5bcc99ac90ae35b0ecd351e52e2b1c0bd9e739d009a119ce4c71f580aad6f204b2d7ef56f434764ecea5b5ff07196094b5fdb4ca290005fcbfb814683ad94454833dba209a