www.philhitchenoilfieldtraining.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:50:3d:04:c4:aa:10:22:65:f6:00:21:77:a3:51:a1:7e:bb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.philhitchenoilfieldtraining.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:50:3d:04:c4:aa:10:22:65:f6:00:21:77:a3:51:a1:7e:bb
Serial Number (int): 288640554814712194312783585590041401982651
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 95:76:07:c4:b0:5b:96:4c:7b:58:f8:e0:b8:ce:45:11:0c:88:78:18
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c7:4c:b6:bf:53:b0:c4:47:48:99:dd:d0:b8:86:71:1e:57:71:7e:16
Fingerprint (sha256): 37:c8:37:c4:8b:85:5a:e8:4a:60:3d:db:9c:01:f9:38:b7:39:e7:9b:52:db:96:ae:69:8c:31:f3:ce:8a:06:4a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.philhitchenoilfieldtraining.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.philhitchenoilfieldtraining.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.philhitchenoilfieldtraining.co.uk

Other certificates including the domain name philhitchenoilfieldtraining.co.uk

(limited to 100 certificates)
www.philhitchenoilfieldtraining.co.uk
www.philhitchenoilfieldtraining.co.uk
www.philhitchenoilfieldtraining.co.uk
www.philhitchenoilfieldtraining.co.uk
www.philhitchenoilfieldtraining.co.uk
www.philhitchenoilfieldtraining.co.uk
www.philhitchenoilfieldtraining.co.uk
www.philhitchenoilfieldtraining.co.uk
www.philhitchenoilfieldtraining.co.uk
www.philhitchenoilfieldtraining.co.uk
www.philhitchenoilfieldtraining.co.uk
www.philhitchenoilfieldtraining.co.uk
www.philhitchenoilfieldtraining.co.uk
www.philhitchenoilfieldtraining.co.uk
www.philhitchenoilfieldtraining.co.uk
www.philhitchenoilfieldtraining.co.uk
www.philhitchenoilfieldtraining.co.uk
www.philhitchenoilfieldtraining.co.uk

Certificate

The complete raw certificate details for www.philhitchenoilfieldtraining.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAiYr91rfN7kjgNkIg/B0S
mMZZ/a3ikm8kqk2mQuO0UcfG/ygQDIWXIatXdSlXy6OYdjEkdG90MG2zbbhd1sF2
cUPp9CvHJRStaxl0sHi5wy1tJp4hTFve40FcKaH8c32+L6eR13m6OATNKfP0FWWP
7/Opsvw79ae0PArLoffOZz0SuL+L3vVovNtl4VpvGCiU2es8t2qQWL7EberK30RD
OQZVHKAlV+kvDidsKWTgV7uzF09u3y4dr6IzcmX4sg4y8n72CzFdsGeUHOoSQi1p
HrUOtem7dYLxzntldn41mt2+f6bPDajs7xt3lDv6JAHE33XLkDMEpi5g0rIWSKQu
TlI/cVrIwftzXJh4Q+GCtT53QTpDmrky0+uCwR4jAhENr21TPFWhy++7eapYUJQF
Arq4Z193hbstox/HfxKNm9obPTvIE60xMeF4yJOSvkNa08G5kVuw0JILmLRwU6+p
t3dxtWQQCt8zuGZU3gzQbww1/ssU0+MRHfdN+fHdt302AOIJshaHr+pwaH7+YIZZ
zTiWVk1fFNDwKVosUrcDkqmSbo5kE3v3gnP02oqW5j5LN+OAfpEF1g8KOg/ZS2v8
4wOBsaxL8/3LaMGS6r/kgpupXGji2DZwPGP8CCqjORygJv2Lt0rtv6WnJhuhtV80
jUrfasjr5wvMJ0e6IwVXqC0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288640554814712194312783585590041401982651
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-14 07:03:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-12 07:03:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.philhitchenoilfieldtraining.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 561126222019587336023064226570818328948063959072345550053412304197790431978572667840769186293527570796744901054047169494904152662721065086045240961345441093807550673929814437639204663408342338181212578053843254571351190210598652530210508012665714264479968649250594691507689560398263933233578516067468562312444173022706928466593896736919784952757713971761550667222858320521300463482455118693344854084953647381508518653550237597315885283889559354633223838434174746345365232740099724891675144974278881312647967106138942320677279341145898283050509096910539912508840757756955752812115654849911137676952965957411564907028082190608782613446768099568746068158116851154077891041487434862790542882261618986130936521233620181820708621357630070680522050251771491585601829897450497431675125573745042164403091343086943537028861447739810285127362938878944103799216274794365824404549330687734418372443020174055040005907290543609991146955044593969949152150933464483397014728359703568965659020416486945549602547326497787435758145079424087885514173187242460850069312500006825680464916423485759089786134851351500566461858245017973345052307597208702987819099437150190715869561595108432830497892488110637531802273958255899449292583183947935671828751034413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							957607c4b05b964c7b58f8e0b8ce45110c887818
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.philhitchenoilfieldtraining.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167113f090b00000403004730450220317471c1509fa135606a6bf17b846ab1c6b90b9c161e83902fec431d3bab97720221008a1cf14b1f0bbe7fea4e487b00e6e4ca0b4c4213525965a615dd47da7f55bd3c00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167113f08da0000040300483046022100b126e5bac74aa50851a08499225248b1a7b3332225f9faec967873ec0b07f845022100ab4686f4aab668047c60a8a183d209ea46598153f4a5fdf9edd15204cb20f04a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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