cwmarian.org.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:89:38:c5:ee:f5:99:f9:d6:ea:27:d7:84:a9:95:39:d9:fa was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cwmarian.org.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:38:c5:ee:f5:99:f9:d6:ea:27:d7:84:a9:95:39:d9:fa
Serial Number (int): 308031006560366434813309363233449724991994
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fd:66:a9:78:8a:02:fd:ed:5f:f4:9f:70:6d:ef:3e:b5:dc:6f:1b:9a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 37:74:9f:56:ee:dd:d6:35:93:cc:95:32:0c:89:97:06:ae:94:f8:5b
Fingerprint (sha256): 4b:07:a2:4a:50:63:7a:95:9f:2b:17:db:cb:80:12:04:e0:56:e6:83:4d:99:c8:37:69:b7:ea:f8:13:d5:e1:e5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cwmarian.org.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cwmarian.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cwmarian.org.uk
www.cwmarian.org.uk

Other certificates including the domain name cwmarian.org.uk

(limited to 100 certificates)
www.cyswllt.cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
mail.cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
www.cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
www.cwmarian.org.uk
www.cwmarian.org.uk
cwmarian.org.uk
www.cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
mail.cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk

Certificate

The complete raw certificate details for cwmarian.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgISA4k4xe71mfnW6ifXhKmVOdn6MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTAwNDA1NTBaFw0x
OTEwMDgwNDA1NTBaMBoxGDAWBgNVBAMTD2N3bWFyaWFuLm9yZy51azCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMNC9my/FlLz9p59fYSYFI0sw5WXxFRS
e5wXZdDWJLqBojMAcgnjR9z5Jm3PbAAmttt4L9Wl+W4ch957QewBCI6UqMxBWG6/
Qi7qV2NB+QnclriPOgk0tNraS2umn+QC5tAHwfgNMHoOgjMIvkU5bjHy2uHaL0uD
IJ5pYpaFsKb09KY7I5p750hoqQdXWec56MowltBaKTW9cKZupNmF6aScHmtJnbQQ
KbLZ5vo5dlF+taOjVo00Rlb9h1cG4MldM0Q3E2sYMQqKDTFqbgvoUr1JJG/oAdYy
4fZ5TwoUFm+QlLv8xXhkcJc/LYBgJIdY4voNdoVErFcqZcWnAEcsp0cCAwEAAaOC
AnkwggJ1MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU/WapeIoC/e1f9J9wbe8+tdxv
G5owHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzAvBgNVHREEKDAmgg9jd21hcmlhbi5vcmcudWuCE3d3dy5jd21hcmlhbi5v
cmcudWswTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggr
BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5
AgQCBIH1BIHyAPAAdQBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAA
AWvaRgegAAAEAwBGMEQCIDvhMFUZhUIPvA921qRIchf4Pdxq4qCZbBjiOK0A5BrG
AiAfPJsCXHuZUbKWhP7ZK328sb9+xgvbkIYI9OB/6rxtIAB3AOJpS64m6OlACeiG
G7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABa9pGCYgAAAQDAEgwRgIhAMCPCv1dVUbp
RjV7Ay2wi7EooEPNBwleUYhgRmU1bPmSAiEAlVDTBHZbSQAUhOm4rBcwZpPaxgcQ
uMiTf+JkjOm3v3owDQYJKoZIhvcNAQELBQADggEBAImBE2u8/eefPl31TS81YTAc
qhzaAHpNpKBbK7xqaLvEe37lLbtnSRLEnoPvyIyfSNFdpstZzbmmMIvxidkky5mE
saLN5yYBwjRKTLQjVKDJXOoyQabiTg6P1DIdkZI8/P7+D1BbvudQOY8HrUN3TDj9
w6yzJBP6umjy4GBTi3o6ZOL252g7TalWt32VxJ7hPuwCHXPOQ7OcOrN0EccX0RC3
0u2MorQ80r1k0V+vXyYKIixFz9O/cUwRS7Wg3vjXOt/5O2/zQkK/VqIOsr97VngG
bEnHPD+l6uqmu1cCa1jLG3T/fuVMf5lTn8tqUBH1CSlQD8u6qr6660pcrFdIxQw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0L2bL8WUvP2nn19hJgU
jSzDlZfEVFJ7nBdl0NYkuoGiMwByCeNH3Pkmbc9sACa223gv1aX5bhyH3ntB7AEI
jpSozEFYbr9CLupXY0H5CdyWuI86CTS02tpLa6af5ALm0AfB+A0weg6CMwi+RTlu
MfLa4dovS4MgnmliloWwpvT0pjsjmnvnSGipB1dZ5znoyjCW0FopNb1wpm6k2YXp
pJwea0mdtBApstnm+jl2UX61o6NWjTRGVv2HVwbgyV0zRDcTaxgxCooNMWpuC+hS
vUkkb+gB1jLh9nlPChQWb5CUu/zFeGRwlz8tgGAkh1ji+g12hUSsVyplxacARyyn
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308031006560366434813309363233449724991994
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-10 04:05:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-08 04:05:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cwmarian.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24649489955573106140976496986733649729151612164221408073098828463201747651671813583271527191526558728170703708265003576498209330644856521082575077334815951126731732420683511762470434688960080670469006613681079101983737803784030680920458996367658949884317933989975384999203798207137634091384703794481808306070054012768580248546460786812129088223782636925188080560831124717356413851809338155944426215476501191765770856832477171412195077596772875843836707873162715030882415606914464123143196413449628170269826898822462114825339555408888773607295183778288562582841993296205582576260377797931848033160036489102451494659911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd66a9788a02fded5ff49f706def3eb5dc6f1b9a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwmarian.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwmarian.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bda4607a0000004030046304402203be130551985420fbc0f76d6a4487217f83ddc6ae2a0996c18e238ad00e41ac602201f3c9b025c7b9951b29684fed92b7dbcb1bf7ec60bdb908608f4e07feabc6d20007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bda4609880000040300483046022100c08f0afd5d5546e946357b032db08bb128a043cd07095e5188604665356cf9920221009550d304765b49001484e9b8ac17306693dac60710b8c8937fe2648ce9b7bf7a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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