cwmarian.org.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:76:27:ca:30:c4:73:7c:4d:94:8e:df:c8:b5:94:4f:e2:c3 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cwmarian.org.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:76:27:ca:30:c4:73:7c:4d:94:8e:df:c8:b5:94:4f:e2:c3
Serial Number (int): 388655352748632882906767723209239512998595
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2a:4f:da:33:38:ec:a6:a8:d5:6a:c1:6c:bb:d9:a9:81:ee:34:04:8d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a3:23:db:35:af:14:2e:76:97:9b:d1:d9:93:8a:c2:10:42:aa:5c:0b
Fingerprint (sha256): 47:5c:c5:1a:fd:89:0f:cf:f7:f4:b6:95:63:f4:33:2b:09:f4:3c:7a:10:dc:ad:ab:e1:33:47:31:57:88:2c:a3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cwmarian.org.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cwmarian.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cwmarian.org.uk
www.cwmarian.org.uk

Other certificates including the domain name cwmarian.org.uk

(limited to 100 certificates)
www.cyswllt.cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
mail.cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
www.cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
www.cwmarian.org.uk
www.cwmarian.org.uk
cwmarian.org.uk
www.cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
mail.cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk

Certificate

The complete raw certificate details for cwmarian.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5/CxWECjHFhQY/UsOUn
pMnQK/iZNZllK54vW09rpkBM3bwvZB2AwDYZDyjco8HRsCHkKrx5GQRgYZe9OJ/6
JP/3afWpMPR6uC7Eudb4VwGi4Fuc0Q0UCstHYry07Y4QXc1doFQlHMXWva2ur6Jl
xlJHE1nAlv3wsb9SHUqgpZmxcDQCBhRU7ImocFs7rDLskc5+3h0e7zkbGOqKX2kq
xMiL/CSEVz0/c+tZPxdHbooR6nNakaNmLRdgxfJbL8TNlBskUnHmiTAMtRIBCkDq
xwtuw3AuwGiL/rpOXU5KgBhuJUG9RJQboXxG0yVRBPaLLk7bZDX5FgtC6qY8tf2t
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388655352748632882906767723209239512998595
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 21:33:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-17 21:33:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cwmarian.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18635811828663072556916821004166373710803379132873920360817001890492848481860868300899449930433399021852496538518364168191285917468248198068895105893845559281991415882520005442967807837875818988889165080712217641716018821027858400466276457923159653123949429874492313067672945299041098362017674429429604024750580000518489679195607569544034849899478599682947336658057196307115734667862688774018332095391115976815300229420991775494689729647235696815915965498339158664155039798379766683409244795307633551180722555440371425361177870299553253451262674785760796783880361877858905110118597823565032806107725606353743824923967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a4fda3338eca6a8d56ac16cbbd9a981ee34048d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwmarian.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwmarian.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e58d8d8290000040300463044022001b21cf8c91e955077e689bba838435d5f4a851c700d888d78b13b7b5380d81502206347d99da4bc170e4833bfdaa1736fb6b9968a9023c6869ac2bbf2684431c6e800770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e58d8da4f0000040300483046022100c1ec68785648f110e8231074945633c80c9be750edd5d03503df8adedbed88f502210080f461b49584756c295e4b9465aadde76bc85771dc33c770e410eb66cbfd3365
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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