basingstokerecruitmentagency.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ff:7b:84:19:ba:13:79:f7:f8:b1:62:0a:d5:54:02:fa:99 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=basingstokerecruitmentagency.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ff:7b:84:19:ba:13:79:f7:f8:b1:62:0a:d5:54:02:fa:99
Serial Number (int): 348273042308589625357814159603831308221081
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9d:24:4f:07:c8:f5:78:94:1c:43:5d:92:ba:82:6c:44:4c:1e:69:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 87:2c:4d:aa:76:b8:c8:48:ba:24:cf:4c:56:64:85:b8:06:55:11:e1
Fingerprint (sha256): 57:90:b4:ef:8c:95:44:99:11:79:7a:6f:11:a4:48:4d:76:5c:33:75:5f:75:d8:c8:ed:04:f5:e4:d5:ee:78:c3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate basingstokerecruitmentagency.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for basingstokerecruitmentagency.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

basingstokerecruitmentagency.co.uk

Other certificates including the domain name basingstokerecruitmentagency.co.uk

(limited to 100 certificates)
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk

Certificate

The complete raw certificate details for basingstokerecruitmentagency.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348273042308589625357814159603831308221081
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 19:29:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-28 19:29:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'basingstokerecruitmentagency.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 865864828352027483013300755706982629786957330302129871792099791627593972026934151409514530998931385363845082861979314455578729777936931177737066210035772653715265037850415179558915916492892830038136413486213148847504320263654396994492986093021132586670306353582688024267701005539809474655405935139782789976965746059306871301066766542515035291176964671296310230521746123614582161185917155174556257246536892099261038421406276555903829664601334141729129934333670784804668691957626042990896195509126837350809774852399417249609464381212555121246207187040401734334460525050888630584378783815183902057610652422513912661707366335597080376070179326876938836648470033204417267925693451856772827823898041792842006074332902654953804092680206096449586577679470227423458346914119875716061024600442160126256653853120409839920068566237270957656359019347626579451304914437982612089703989288126828883311497439366160516312498122029089779628201578502636305675513372332531836409424315482956233485331221424122499522234521673354863040591786482519094446517666267516356611384326576022024135419050523987592521918844576346320447552990611619217990931020316118117621302686963855321654340956547098646687309357456856348913293457606450721231281400464696716677321251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d244f07c8f578941c435d92ba826c444c1e693c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basingstokerecruitmentagency.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ff2fe433d00000403004630440220176682b109d2fb48abc03f8b0c3d977c03a7041330f2e18f855636051ca8f752022046766ba65426fb3ca24fbb3000c2e956ec6a5143e7dcecfb69243820c9d5e3d90076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ff2fe43dc000004030047304502204e0a12cc1bfe3594e0e64ada9ac58c658a0c5b785df173a18709255454806758022100e755242abb960f75d5f539ce2a3e4363a5dfdc041f6c80da9509f9dfaf3a1f26
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0020072de79f067494709d45d5ea5d334b2bb357609058b1e733a48c98fe3c2f57b2166465214b99f9fda88fdd312844983ba0d8bcdaedd814c74b82ba7347fee0f9be1088e9124c1921669601c033aa4834b5b8e76a9fea73b66f3321c042cc362f51f058c3f4cbe40979dddb7176ad229cc879e972347ba5c8d658c614c2e648f85d115e169f7b9d72b5e0e2fd8e51b0025faea31d24c06a254bdb3e9fa31e9b7060c1675e5ad34fb615c3efc7d3ff98dc7b144175bc228a1ef190b71196ffaa15c9d6dd653ab4e27f5c1d67aa7cefcde1cfd191ecd3f7a71b7db366cf633bea8200406b7589d73bf0d0fe4bb971de9d493140af43e7af35ea74b555e0b04cb3