www.jec.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:bb:2a:d7:5c:79:f1:12:35:a6:3e:b9:50:dd:78:04:de:5b was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.jec.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bb:2a:d7:5c:79:f1:12:35:a6:3e:b9:50:dd:78:04:de:5b
Serial Number (int): 325026606204786683163688307968375108460123
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f1:2d:17:73:f6:e1:55:4b:d9:4d:d2:ff:50:6d:06:71:1c:6b:70:8d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1b:38:95:85:96:1d:36:29:72:ad:9c:3e:64:6b:00:9f:df:fa:a7:b4
Fingerprint (sha256): 62:77:98:d8:39:13:32:37:20:6f:64:5f:da:3e:c7:e2:c6:0a:99:68:93:36:ad:31:49:cc:56:10:61:ca:0e:33

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.jec.co.uk

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jec.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

energyforeveryone.je
jec.co.uk
jerseyelectricity.co.uk
jerseyelectricity.je
websiteadmin.je.wrvc.co.uk
www.energyforeveryone.je
www.jec.co.uk
www.jerseyelectricity.co.uk
www.jerseyelectricity.je

Other certificates including the domain name jec.co.uk

(limited to 100 certificates)
jec.co.uk
careers.jec.co.uk
www.jec.co.uk
www.jec.co.uk
careers.jec.co.uk
www.jec.co.uk
www.jec.co.uk
ph-expressway-e.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
*.jec.co.uk
*.jec.co.uk
www.jec.co.uk
jec.co.uk
www.jec.co.uk
www.jerseyelectricity.je
www.jec.co.uk
www.jec.co.uk
jec.co.uk
www.jec.co.uk
www.jec.co.uk
jec.co.uk
mailmarshal.jec.co.uk
www.jerseyelectricity.je
jec.co.uk
www.jec.co.uk
www.jec.co.uk
*.jec.co.uk
jec.co.uk
www.jec.co.uk
www.jec.co.uk
*.jec.co.uk
www.jerseyelectricity.je
www.jerseyelectricity.je
www.jec.co.uk
careers.jec.co.uk
www.jec.co.uk
GIS.jec.co.uk
careers.jec.co.uk
www.jec.co.uk
careers.jec.co.uk
jec.co.uk
www.jerseyelectricity.je
www.jec.co.uk
*.jec.co.uk
jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
jec.co.uk
www.jec.co.uk
receiver.jec.co.uk
receiver.jec.co.uk
jec.co.uk
www.jec.co.uk
careers.jec.co.uk
jec.co.uk
www.jerseyelectricity.je
www.jec.co.uk
*.jec.co.uk
www.jec.co.uk
www.jec.co.uk
*.jec.co.uk
careers.jec.co.uk
www.jemail.jec.co.uk
www.jec.co.uk
jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jemail.jec.co.uk
jec.co.uk
jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
webvpn.jec.co.uk
www.jec.co.uk
jec.co.uk
www.jerseyelectricity.je
www.jerseyelectricity.je
receiver.jec.co.uk
jec.co.uk
www.jec.co.uk
ph-expressway-e.jec.co.uk
www.jec.co.uk
careers.jec.co.uk
jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
extranet.jec.co.uk

Certificate

The complete raw certificate details for www.jec.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbn3hskzUsAX0GQ8dFhk
jh0lL8DwzMMhTHISIcBFCv/ax2FsfxkYqZ8YlMlPVVdU19raceyfAw2PVIGT8TU9
h35UdSpFB4swV2q0QOWzz0Dx5hDijyKMnA284he3IU8wgdLTkd/rPN2pR4Bx4zHe
vUTG2wufXDkV/wOLWrbEgGGOpRe1ToeYTG5sbuEUoGBCMBTu0zIyY1I+Z2tq1/RK
+HbEwUSb9+Z2gt50Jd4FtbWjEWJl+DoAbp7/PIVwZGT8JkTx1KUWEfi7tq2F9AGl
59/EwyRqYeyd4trQzIyEB752A/s3KoidmSAMn/Xm4nR7QvCqFeJINrPh00IdaW+v
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325026606204786683163688307968375108460123
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-16 14:41:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-15 14:41:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jec.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17891304696655047320229425386705250846820224773301741511579073051320263727860452223126065498063255397293232501274369250906396312934829619708100132378089527585158132162217140273035226667357443436345060718585541780051980487693227476053838055107825595833376361290394597672133392581464017541245843803510949697217637680852208729757522969353587218687906339737894418095547829652003101579173188745145566276296702244781624722027019661765871054336950010837806239796197870803894199433102814698785130500727256994897251782973938029262034395640830888049588664664143300129957026863858233844752417720363706418254227504308787751137159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f12d1773f6e1554bd94dd2ff506d06711c6b708d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (207 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energyforeveryone.je'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jec.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerseyelectricity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerseyelectricity.je'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websiteadmin.je.wrvc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energyforeveryone.je'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jec.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jerseyelectricity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jerseyelectricity.je'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000018346f66e25000004030047304502207475476ef7e093425166dec95a83b9285560dc66b944904545093821fe6eb408022100b255e82358d8b13c4790db85059d21d93c90d59177210fc3d543434d6fd2bce00077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000018346f66e1d0000040300483046022100b4c2a80d500c2a5b82483d391f49dea08358fd4f640896fbdea82ec52f821d89022100f2e017938c0fdb515794f3e673e53ecb69a0940404007f8cd549c42bc4a55c12
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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