www.makeeducationcount.web.ucu.org.uk

Issued by R11

About this certificate

This digital certificate with serial number 03:ed:8e:a1:95:37:05:75:8e:04:90:42:74:64:12:0f:97:e3 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.makeeducationcount.web.ucu.org.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:ed:8e:a1:95:37:05:75:8e:04:90:42:74:64:12:0f:97:e3
Serial Number (int): 342173368117177107364305670396785820932067
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 97:b3:33:9e:f8:90:27:9e:f8:ef:df:80:4c:cc:94:87:04:31:a2:28
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): e7:63:dd:b3:db:b6:a0:8b:93:b9:25:ff:c4:43:13:c4:91:5b:47:77
Fingerprint (sha256): 38:99:19:73:d7:3f:bc:07:19:e4:91:d5:de:98:5f:6a:26:59:2b:0e:50:af:1a:15:b1:d7:43:17:ec:b2:14:cf

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate www.makeeducationcount.web.ucu.org.uk

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.makeeducationcount.web.ucu.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

defenduss.web.ucu.org.uk
makeeducationcount.web.ucu.org.uk
nibsc.web.ucu.org.uk
rateforthejob.web.ucu.org.uk
reading.web.ucu.org.uk
southampton.web.ucu.org.uk
southwestregion.web.ucu.org.uk
www.defenduss.web.ucu.org.uk
www.makeeducationcount.web.ucu.org.uk
www.nibsc.web.ucu.org.uk
www.rateforthejob.web.ucu.org.uk
www.reading.web.ucu.org.uk
www.southampton.web.ucu.org.uk
www.southwestregion.web.ucu.org.uk

Other certificates including the domain name ucu.org.uk

(limited to 100 certificates)
list.hermes.ucu.org.uk
www.mrc.web.ucu.org.uk
ucunorthern.org.uk
fairpay.web.ucu.org.uk
webdisk.ucunorthern.org.uk
portal.ucu.org.uk
*.web.ucu.org.uk
owa.ucu.org.uk
defenduss.web.ucu.org.uk
ussjep.org.uk
www.exposed.web.ucu.org.uk
*.web.ucu.org.uk
ussjep.org.uk
ucu.imperial.ac.uk
makethevoterpledge.org.uk
fefunding.org.uk
climatelearningresources.org.uk
ussjep.org.uk
*.web.ucu.org.uk
fefunding.org.uk
ucu.imperial.ac.uk
*.ucu.org.uk
cpd.web.ucu.org.uk
makethevoterpledge.org.uk
greenwich.web.ucu.org.uk
ucunorthern.org.uk
ussjep.org.uk
www.makeeducationcount.web.ucu.org.uk
fefunding.org.uk
ucu.imperial.ac.uk
ussjep.org.uk
ucunorthern.org.uk
my.ucu.org.uk
speakout.web.ucu.org.uk
*.ucu.org.uk
makethevoterpledge.org.uk
ucunorthern.org.uk
www.dudleycollege.web.ucu.org.uk
web.ucu.org.uk
www.exposed.web.ucu.org.uk
ucu.imperial.ac.uk
*.ucu.org.uk
ucu.imperial.ac.uk
web.ucu.org.uk
ucu.org.uk
bath.web.ucu.org.uk
ussjep.org.uk
*.ucu.org.uk
ucu.org.uk
knowledgeeconomy.org.uk
www.ucuimperial.web.ucu.org.uk
ucu.imperial.ac.uk
speakout.web.ucu.org.uk
members.ucu.org.uk
makethevoterpledge.org.uk
*.ucu.org.uk
fefunding.org.uk
ucu.essex.ac.uk
www.fefunding.web.ucu.org.uk
ucu.imperial.ac.uk
webmail.fefunding.org.uk
fefunding.org.uk
makethevoterpledge.org.uk
web.ucu.org.uk
fairpay.web.ucu.org.uk
cpd.web.ucu.org.uk
list.mercury.ucu.org.uk
*.ucu.org.uk
ussjep.org.uk
join.ucu.org.uk
join.ucu.org.uk
fefunding.org.uk
ucunorthern.org.uk
branch.ucu.org.uk
*.web.ucu.org.uk
ussjep.org.uk
ucunorthern.org.uk
list.mercury.ucu.org.uk
ucu.imperial.ac.uk
mail.ucunorthern.org.uk
ussjep.org.uk
ucunorthern.org.uk
ucunorthern.org.uk
list.mercury.ucu.org.uk
list.hermes.ucu.org.uk
my.ucu.org.uk
owa.ucu.org.uk
ucu.imperial.ac.uk
web.ucu.org.uk
*.ucu.org.uk
webmail.lovefe.org.uk
web.ucu.org.uk
web.ucu.org.uk
ussjep.org.uk
list.mercury.ucu.org.uk
list.mercury.ucu.org.uk
cccu.web.ucu.org.uk
*.fundthefuture.org.uk
yoursay.ucu.org.uk
ucu.imperial.ac.uk

Certificate

The complete raw certificate details for www.makeeducationcount.web.ucu.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwezcTMgnR8LvhHlk7UoH
j1CeTz72OZ9yGsMulmjYRpe2C3pw/cPXuTzWHMYSP1GUZkRZhrUE/qZZJPJ3jAWX
drrYNSvXy2TRk8HWynLALfrTWsLbCKtqQkBHNn2e/qKVAvtpUjfcB77PPASPpxVh
W/1AhubUthwLx7LGY8r6yWsr8P9zUS2h44ykF2Qu6mEJanSHjA/ksER1/VENaPeA
uo2sWac2Fol9nOAs+4K31ik4xAARIf2A/Qe8DgIhdg/d/kVs6CJoO7iPleRRNVRz
ZGf/5EisQXT7XXN8ZTQVGC7sAa3JLGKMMZnvpM3w/hu5DojCSJaawdnD5itaJQqa
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342173368117177107364305670396785820932067
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-22 15:03:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-20 15:03:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.makeeducationcount.web.ucu.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24480793147183185729314183263752504712330267577082961839764021893934454364603394426418879677783977979423633028175522029547102577351503296590639686118166358732836905672172888030180055683704948286013777184759180558266465717145918029521237180142838214535448972674716477063758793323302331759008188736633811042475785704520666778133299039760011218063836504953887613006577917885990136191141159957207214288520811598072334587487340039208325634712407185485215142612680331273137203828385771944190650780093531671849402127730386470505074217922231776407049298432871959864684343619924540496702314404991163118588321494726443321170657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97b3339ef890279ef8efdf804ccc94870431a228
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (426 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defenduss.web.ucu.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeeducationcount.web.ucu.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nibsc.web.ucu.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rateforthejob.web.ucu.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reading.web.ucu.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southampton.web.ucu.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southwestregion.web.ucu.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defenduss.web.ucu.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makeeducationcount.web.ucu.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nibsc.web.ucu.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rateforthejob.web.ucu.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reading.web.ucu.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southampton.web.ucu.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southwestregion.web.ucu.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000019040b0aed3000004030047304502200ac1ada22101b0bd7f9e1016ce92790bfe1bc5bf39942a0ddab756d0330cfd5e022100e56b12fc4aec312236af2a8b339c86ea5778095a4cf4b80aa13e1beefb8a7500007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000019040b0af970000040300473045022100a0bee738a1096bb2f53813b678a1529e195f9f225661eeb69960602c976fcd0402205f4a6fed3b6fdb897624b1f0339f0cdf49aa203be5e9171e59883a28e4067db7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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