stgroup.co.uk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:99:52:55:cc:6d:9c:0c:5f:73:ab:18:72:25:71:18:b5:07 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=stgroup.co.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:99:52:55:cc:6d:9c:0c:5f:73:ab:18:72:25:71:18:b5:07Serial Number (int): 400621788053127633536714514878106829370631
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 02:9c:cf:f4:b9:1f:1d:7c:4e:4c:1f:b5:e7:52:b0:6e:9c:dd:bf:2a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b0:56:5e:44:2f:c0:c1:70:74:2a:8e:50:5d:0e:21:f3:05:bc:0b:ee
Fingerprint (sha256): 40:16:87:d5:e3:fb:7c:ab:1c:e7:43:8f:f5:16:ec:21:1c:8b:1a:c2:fb:d6:43:b8:1b:38:86:6e:90:47:02:7e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate stgroup.co.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for stgroup.co.uk
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
stgroup.co.uk
www.stgroup.co.uk
www.stgroup.co.uk
Other certificates including the domain name stgroup.co.uk
(limited to 100 certificates)
Certificate
The complete raw certificate details for stgroup.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgISBJlSVcxtnAxfc6sYciVxGLUHMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTExNDQ0NTlaFw0x OTEyMTAxNDQ0NTlaMBgxFjAUBgNVBAMTDXN0Z3JvdXAuY28udWswggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDI3/qVgxvArKz8c3OEN5nu4VjvClmOV5JJ ZAIE4jpkNhsv6ZdE1I4af/cYF8GokQqKW71ecH33mCOUHaVkud8mv0qrW+ic04jD ISKoqf/5x2vDz7qLhMzwOoWAwUZXsFql1SsbEu+TlqBcn15bCFM30yyqIM4SRIBw TYanCnH2YFMvrdIlwm0XaAxIW8bzc3qObZ0hXU5EaRpuAD06alDJYXTk3b4srH0O gpcdMxPI87g7gLJ6s9UTO4601ZQ0YdeIpsjIQ2jR0PNgmI0z+iT0M6PiBypYg4Js ESmgbUbL6YWRCTD7JlZZTTT6n3+PGio4HW9rK9rzQ1caToPJpYLaC4wAyAdHiAl9 fZzZGepVVECPwIX5HTIZVkL4d46RYB+bUBldRPc+pT43xbB3LHBZD4MwRJn8ZHcY fTFFukZwrdw1UIYYal2N8Rwzbq1Pvm+/HHKNdJxyOtpN/WyogqJSXvbDUCyca8+y RJu7R02/ESJxbrh6aIrfgHXVTd8HS8RTCSSIrEoH/4dmE66VhmZbhv96tZHIq8k8 vpsKbmJ6zONqY6S3alMON9n0QkvYVnK7yYbwcQsCFwZgdmQk/T7DosJdv+O3i11i AkEUTWmLVZszosCvc8hG/NZIP+qoqB6ygMc9SJqGKQm1f+2/Yru7cpuiCYckEswi Xh+KbkVETwIDAQABo4ICdTCCAnEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQCnM/0 uR8dfE5MH7XnUrBunN2/KjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCDXN0Z3JvdXAuY28udWuCEXd3 dy5zdGdyb3VwLmNvLnVrMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB BAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQAp Bo2yCJo32RMAAAFtIP/TpgAABAMARzBFAiEA1I4MlvIjJnPQndY6jpyTdoVl2mwa aRM6eqaFbvyXoMECIHZ3qcB1D67smLJkUVdk/1sF/pxGVhjsLUNixJkuDC7/AHYA Y/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFtIP/TcwAABAMARzBF AiAA4+3O+3Z6PCweVTRK0Z4SjFEjRK0s8OBgxULYCUi+7QIhAMsRWND27jL4M0YT B36r9HjCRSZG1bVCeLNlHjzLrqEBMA0GCSqGSIb3DQEBCwUAA4IBAQCFtbg4LDRI Z6oLimgToFosDnJVYfHqZI48CNug7fk/ETvBrPadpAmXpcft8Ktt6KAv0i8Q+K/M LHqIE9F/0dxplEY3MYBLIyBCRbkHdbN/mO23ASGOdeEpr8AEz9cxkiq43SKbio0M CuE6OP8Wta2vtYKKJ9HS5h+iPqxuxTz3Hhl9F7k6wCSptYBOxwls16gIHIpaI2xV 3pB5gDIg9Nw0Uw9laZ5CjdKlei69OYVL1PM0cK1hy+vPDFdsh3igFMIlbN4AlNqa 21PljQ7E6vL0NDWpC67TaYgMhL1QwKUZz9Vsp+EP2/KoYZ6pTuT+a9cJMbv1rEka Xh7otgVcPG8w -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyN/6lYMbwKys/HNzhDeZ 7uFY7wpZjleSSWQCBOI6ZDYbL+mXRNSOGn/3GBfBqJEKilu9XnB995gjlB2lZLnf Jr9Kq1vonNOIwyEiqKn/+cdrw8+6i4TM8DqFgMFGV7BapdUrGxLvk5agXJ9eWwhT N9MsqiDOEkSAcE2Gpwpx9mBTL63SJcJtF2gMSFvG83N6jm2dIV1ORGkabgA9OmpQ yWF05N2+LKx9DoKXHTMTyPO4O4CyerPVEzuOtNWUNGHXiKbIyENo0dDzYJiNM/ok 9DOj4gcqWIOCbBEpoG1Gy+mFkQkw+yZWWU00+p9/jxoqOB1vayva80NXGk6DyaWC 2guMAMgHR4gJfX2c2RnqVVRAj8CF+R0yGVZC+HeOkWAfm1AZXUT3PqU+N8Wwdyxw WQ+DMESZ/GR3GH0xRbpGcK3cNVCGGGpdjfEcM26tT75vvxxyjXSccjraTf1sqIKi Ul72w1AsnGvPskSbu0dNvxEicW64emiK34B11U3fB0vEUwkkiKxKB/+HZhOulYZm W4b/erWRyKvJPL6bCm5ieszjamOkt2pTDjfZ9EJL2FZyu8mG8HELAhcGYHZkJP0+ w6LCXb/jt4tdYgJBFE1pi1WbM6LAr3PIRvzWSD/qqKgesoDHPUiahikJtX/tv2K7 u3KbogmHJBLMIl4fim5FRE8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 400621788053127633536714514878106829370631 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-11 14:44:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-10 14:44:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stgroup.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 819498165017203330127813631037839886167955887418243648738829870983891547769457984835847709974289315741485686619354448879635817000429845028890289581523900454554631264159492659614195430226327182796715502551955267471501365662875250411147720363358158928944054981857013745126832216215912351994344802232692891925697964524189456517573011197845212088094650969361167292554630699391660930813668648602075352890965162141536111458835255398434802390721117612596991911115371217911633795426205224600736221151690556409183457901609899342636647419579405592095273411959279506938109870036513243779364650111059611859948692617808764491003505356942803720191234873897996706440698275840056621924548817105058925740908213092672457005310180343565841006710061513142656046554790202569302273228855281039165967353219208345838978866733044944930995706575510458775342606882332806729449180197671557094992037173692996515024004482003454050715423857140130219030548956733258960688932427953682044986203904602588268618334989344122199871703264519939303404494594190405576824024756402341712382414655816389660861500394078966056414482666468043976020821823047030899110978925035829927713660890462454686190762872902321692182312771111027484046796122777945952601266236096927743141561423 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 029ccff4b91f1d7c4e4c1fb5e752b06e9cddbf2a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgroup.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgroup.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d20ffd3a60000040300473045022100d48e0c96f2232673d09dd63a8e9c93768565da6c1a69133a7aa6856efc97a0c102207677a9c0750faeec98b264515764ff5b05fe9c465618ec2d4362c4992e0c2eff00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d20ffd3730000040300473045022000e3edcefb767a3c2c1e55344ad19e128c512344ad2cf0e060c542d80948beed022100cb1158d0f6ee32f8334613077eabf478c2452646d5b54278b3651e3ccbaea101 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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