chiumento24.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6b:64:dd:c4:5a:fc:24:bd:bd:c5:c1:94:88:f0:a2:d3:a3 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chiumento24.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6b:64:dd:c4:5a:fc:24:bd:bd:c5:c1:94:88:f0:a2:d3:a3
Serial Number (int): 297881145335566234896492695735869020230563
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 11:45:62:cf:d7:14:ca:33:55:d1:91:54:1e:48:b3:90:ec:a2:77:86
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 27:0f:38:39:3e:74:4f:25:43:7f:3a:d3:04:39:fa:6e:6b:e3:f1:ed
Fingerprint (sha256): 32:ef:e3:40:d2:2a:10:03:5c:aa:c4:dd:fa:cb:69:33:2b:94:b4:86:68:ae:d5:1a:ae:ea:b6:01:7c:37:1b:0a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chiumento24.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chiumento24.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chiumento24.co.uk
dev.chiumento24.co.uk

Other certificates including the domain name chiumento24.co.uk

(limited to 100 certificates)
chiumento24.co.uk
chiumento24.co.uk
chiumento24.co.uk
chiumento24.co.uk
chiumento24.co.uk
chiumento24.co.uk
chiumento24.co.uk
chiumento24.co.uk
chiumento24.co.uk
chiumento24.co.uk
chiumento24.co.uk
newsroom.chiumento24.co.uk
precisionsensors.intreface.com
careercompass.chiumento24.co.uk
chiumento24.co.uk
chiumento24.co.uk
chiumento24.co.uk
careercompass.chiumento24.co.uk
chiumento24.co.uk
chiumento24.co.uk
chiumento24.co.uk
online.chiumento24.co.uk

Certificate

The complete raw certificate details for chiumento24.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297881145335566234896492695735869020230563
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 23:00:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 23:00:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chiumento24.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 901458629685430816518225672853200809570689344571832377913534222773883110680745908905845402495118583921862060129519005982833686149082903380669916058684433807786922068388002817220288140305166222288152724887467209673889404697960750259372008213009638332565786978803556029211409008225200965261234513640172623637468008071687661316569781932014289927721902111545653546800241478067578289983577606694339062479817386272613362282054700875832337619755819857002366044322322002883669106607812955594559538366794761256016987852037117689036500741470036904495938956461787729693323879831640401261476135552083376596316565480125348178089562006355117037196498566779774424593920016833140226853551055536579307844715988094598410703389974716480681899188735644275919743011269027057791915324565515678442320893496836269055060641927720726098089229228694945547120321931326039066711880642909675539819685284286242310052876670483932549965351237560460705772512586712539863725183794291855765380562278402747623987755306713031779235413116340308184870132073771692059372925652262876163413556716890527758075764369004488385706038195932158301483613681449334100399472278868794045168478821727787401098995668929236557721834226207136542616227904668541933612450451262799317308298469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							114562cfd714ca3355d191541e48b390eca27786
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiumento24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.chiumento24.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d849e3db00000040300483046022100a33de10972be8d586d34a0e762ca6d59a3a64b70881ffc84cc1ca6edb90064d7022100dfeb860110b8e68dc4b2495a22271b644f6f67bf6b88cdb95c50f8b6fd900c0e007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d849e42900000040300473045022100d1bc9722bc8c61d4c9cfbc0578a73094d030e0a00fa4a301bdab9bb29883f06102205c3fdb91f2820feaef72b881154146d183ffeb87eca11d88e39b1e4bc09b277c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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