www.benchmarknorth.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:7d:ca:e5:a9:26:5f:fd:1e:21:64:89:83:08:43:87:17:57 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.benchmarknorth.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7d:ca:e5:a9:26:5f:fd:1e:21:64:89:83:08:43:87:17:57
Serial Number (int): 391254136114055052270397644713356777953111
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a2:be:20:77:03:fa:6b:12:94:82:9d:49:19:d9:00:76:90:87:8e:83
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): eb:0e:57:d2:bb:5a:0a:46:60:e2:d0:de:da:1a:3b:62:a6:ac:2d:87
Fingerprint (sha256): 4f:17:9a:f7:13:42:4b:6a:c8:b9:0a:89:92:2c:a0:5f:69:da:1f:a2:71:11:0c:22:2d:2c:db:13:eb:a0:77:bf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.benchmarknorth.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.benchmarknorth.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

benchmarknorth.co.uk
www.benchmarknorth.co.uk

Other certificates including the domain name benchmarknorth.co.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.benchmarknorth.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391254136114055052270397644713356777953111
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-25 17:13:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 17:13:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.benchmarknorth.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 639243897013005917563421837983545768277093162681163750802390967866687238882626766078119422851118754643070153983297215141335220588742095907314885490446418725932687045097068365838518300554264696719624753433224393784253606510013750593251625847369090538119348523904523196244943282268232881565685274369582448222527076300656334985584686585783503674289010395392497122634514812791426189620250612596835229937724516617557976892589617755621251410771632078919319527164571780330698890909020837797540629812227041087704837751141721062644395662488892610518418597904783019360673975195939540391225570385668981436378780268075382742542890116889505235232491799701868574819071525919839211325726369314859675576317951272733127018039612397868997970958134546294571190666147242993890539205041838308889803056757490956626063650029987110472368869066927851109349642628919562019265089952802030535195384000179449910786345751309353197221614012412011521318995849850715484668233180317469236151588170627531908766606940446415799118845573582495814159280524724013549821812237112599055763355439303473766117183611415842995171529664193981863584845236954021054482793558178943759567348528529686310519132563918225829367931192002399005718944048701006160912425668560175774442398659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2be207703fa6b1294829d4919d9007690878e83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benchmarknorth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benchmarknorth.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018de1790527000004030047304502200685329a7f08aa8b315428b57e2086c3744c783d7fc5c09911ea9ee47b8b46d70221008eb033dc3c57db55acac2025e5bd123b911510173d51ea06afd144d36ee9ce8a00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018de179052900000403004730450220075f9f3a04a3cfbe91d7f9ad7f083ece735bce90b5732a1c5d9b6590b4c1a31e022100bdbc3ac4335999d881f3bc26a0aeeaf5423b893898fdd5123d625b3fd64aea63
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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