www.birmingham-usedcateringequipment.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:28:fd:d2:e9:6d:b1:30:48:b9:95:a8:e5:62:82:87:05:53 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.birmingham-usedcateringequipment.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:28:fd:d2:e9:6d:b1:30:48:b9:95:a8:e5:62:82:87:05:53
Serial Number (int): 275285542271884299091558897093889011156307
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 01:c6:07:08:be:62:08:02:80:c8:2d:fb:43:72:66:a6:3e:f6:c5:14
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 67:03:6b:40:24:39:2d:04:45:b6:df:0c:f5:c0:a3:f2:d3:31:4e:0c
Fingerprint (sha256): 4f:7d:37:2b:ec:4a:21:33:87:fb:5a:b4:9d:a5:52:3b:31:5d:60:29:02:14:4a:85:77:a4:7c:b6:bb:96:ae:a5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.birmingham-usedcateringequipment.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.birmingham-usedcateringequipment.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk

Other certificates including the domain name birmingham-usedcateringequipment.co.uk

(limited to 100 certificates)
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk
www.birmingham-usedcateringequipment.co.uk

Certificate

The complete raw certificate details for www.birmingham-usedcateringequipment.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275285542271884299091558897093889011156307
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-08 11:03:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-06 11:03:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.birmingham-usedcateringequipment.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 894885046314924792204952266153466515835636745550011551111308452979270050474321352332465708429996076033118646910704402167844576772396497022295439391484711553545034627671261783560696261327520104617606787999520686915905140387087232438680963081137545517030170507098422189491283618477198472185947055211710251410761159439534234424001742228773498234543756786912190487762715728346960822469612709912587480880550789187895183116171857758273621244334810658450151442298185463101724170272305505577409602535787682108404716012059681019291697899055558587723561228783704774816285618602338480667692558985325908893953023874140383253164012939871694683252773263687796767599597470055420899725263515424433182622788370511043285291138594531094896538588278351585633559001353787435336364310994518781627298326486323121752885533104497885143950352630308560180540361386148446150154474569521607166733052456831211231551323850889533668787586715931507708604973144873132813560360549460540216492342931245245487546642599982606812012788498285160180978216634816552051985486020342445850591782697577394245383222481780889146830575297723090895331382793556854662314649250402779516093006912054036330126985215052797752330166814908551188645152174684224890646689551027994428953973477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01c60708be62080280c82dfb437266a63ef6c514
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birmingham-usedcateringequipment.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birmingham-usedcateringequipment.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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