chunkymonkey.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:06:7d:29:4b:15:e2:0b:5c:e4:0f:8a:f7:05:a6:c7:48:d5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chunkymonkey.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:06:7d:29:4b:15:e2:0b:5c:e4:0f:8a:f7:05:a6:c7:48:d5
Serial Number (int): 350657205835125400815064757971440927983829
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 37:c5:e7:0b:5f:82:4a:ac:bb:24:66:ac:d6:25:6d:bb:1a:4b:01:44
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d9:90:19:f7:e7:9d:2d:74:6a:1d:9b:13:79:68:67:67:50:08:f1:5c
Fingerprint (sha256): 6b:12:a2:93:e8:06:f6:cc:b7:40:ff:3b:dd:68:a2:60:19:11:5a:e4:97:62:ee:94:85:34:a4:24:43:28:f8:0a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chunkymonkey.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chunkymonkey.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chunkymonkey.co.uk

Other certificates including the domain name chunkymonkey.co.uk

(limited to 100 certificates)
www.chunkymonkey.co.uk
chunkymonkey.co.uk
chunkymonkey.co.uk
chunkymonkey.co.uk
chunkymonkey.co.uk
chunkymonkey.co.uk
chunkymonkey.co.uk
chunkymonkey.co.uk
chunkymonkey.co.uk
chunkymonkey.co.uk
chunkymonkey.co.uk

Certificate

The complete raw certificate details for chunkymonkey.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHETCCBfmgAwIBAgISBAZ9KUsV4gtc5A+K9wWmx0jVMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MTAwMjI3MjNaFw0x
ODExMDgwMjI3MjNaMB0xGzAZBgNVBAMTEmNodW5reW1vbmtleS5jby51azCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK63w48WUDTYZ3Wl/9d/KiQN0tcG
AWVc7EfNkIEHK3Wurkhg8gt8K2V387mx/xbhEEp2nF7oE3KyC6tmuVyHX+V7Q4Aq
2sR+zNex9B0fVBlWnS3pjO45RPPCGJdDj4RLe33U1KUWehXV5jkEjhHjafIpDmuq
niNL4pQBhBZzqtQzODSAw3wvpDbKIYisXBRAbISs6/iAVvUjK7prYFdoq7jl1L/G
J8acKEZZXVFVu3ICvrgbS/cdZZaCPOp8iPzoxswpVYcly1jjfxeF8db6pJ9k/A/F
hM0HUkC3ukhdQmLClSWjbCPBpjhno4s9DcsURQ5RSzw0iliMlvkS0o2hv0pwcpf0
hLFSi6xjRxXb8E6zJGZWaWm4KNNUcXk2oX6AhrOIZ3Lm0KUx5ki5LMruwscNuELr
ZNyPXf2kuLR1MQsGAmuNstAZr98i5HVeFtYivbw4FfAdyLIOwhkb+v5RQ9tRFFc9
O6KZW+k7O8i2xpNnlXxGiGnPSPan4iKOxYcAVKKAhiImRXoKNm+4A0INnasc53rx
Y+7bVmczja2h1V5rREGMl4nX/bk1883TSHzcIMAgZ+P22SqAyeoLImizW0q3B2Dy
bwgYHW5dJVOIfLgHVGL5qc3l5mBZ9yE8VzYw6UAVeat2k/WJ1cBAWUx95UZPei5j
17gAwpV6SHussgZZAgMBAAGjggMcMIIDGDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FDfF5wtfgkqsuyRmrNYlbbsaSwFEMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISY2h1bmt5bW9ua2V5
LmNvLnVrMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB
1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsG
AQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQg
dXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3
aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRz
ZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEGBgorBgEEAdZ5AgQCBIH3BIH0APIA
dwApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWUh39wjAAAEAwBI
MEYCIQDJVACVC3JaoJUA+DYQkxdOsk5yYRRV6ytm0w1qlXdIfwIhAJkkgEFBHQqn
q/9B/T29ZNcopk3cAIcNRyMcPsRJFFYLAHcAb1N2rDHwMRnYmQCkURX/dxUcEdkC
wQApBo2yCJo32RMAAAFlId/cXQAABAMASDBGAiEAlFUu/eew3/t6QS6qlPMa6Wso
NY7o5gtkdKRWSFjxcmoCIQD4v0Jj+TlkToPaMHCShcJlSEqej2HH4SIpvd21MkVr
0DANBgkqhkiG9w0BAQsFAAOCAQEAKuGJzOIiNVE7/ABAgxlQfd1Q1/mD73XVf9p9
Nb0AL6LHzmyODdR4yiYE6IGnyQKqfN4gZlb2IERkbE9oEiU26QUCiYif8MqHDa4d
6ZfU6Dph1UPsRwLsogW+Q/8aSOIuymL76lHQo22OZ0gB3ynyrLtFJ9skAjlNS1fM
FZl3m0IM9Vy6uZ92gD/b7tANXzsLFs5OuFxekEs5/54d3088vwdcXCqr54nC5QRd
omczhox9JEyivGrYFeCOTHxlnCRaolib9XON49bLW4yTwSj6FV3QFDgyu0txb6Zg
pwodKg1UNai2TD6dF7sXa1WetGwUFWxf0kssEEFCdRedOS8ozg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350657205835125400815064757971440927983829
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-10 02:27:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-08 02:27:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chunkymonkey.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 712786549527161065509897045544116630302903478535070059563465750459052145527584883168283554652874913004893702481053384070788411324080147488363691967772414527539744740754363057886838300890621120346585823166117301791292025029244786086102966327486428605450079818345331218048397771275567196190200652243851897274577122363336292675925417528305694386525454963833392734751546413613620482628167816816619433647487407535534851625420875037138167802436157946402563183962751160423719989835998746431974060611566439686896058523999236708966540812546347620160342401137853619142927376009044063908585360913729585444936573766556377636704673777029073997316951556038918911321524767363388038405696781069612396941471365392047133586592622005322276218205511338593744574300545557074940980826632171971237615376661010964272595250497192449893711445502004279472064307513979020272384057329735091363922827382197335137173968050552007502656479170852820909104576678991324701481822389124086983126172643548169841528011466995900089173975374569007249258851443826137617597842174831518374891668824798906770719128156790177411065965426152401543402534015154653192399019923687539497484045181107760813638490976381890598476653265527737147216392646525597917685312017622356816433383001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37c5e70b5f824aacbb2466acd6256dbb1a4b0144
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chunkymonkey.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016521dfdc230000040300483046022100c95400950b725aa09500f8361093174eb24e72611455eb2b66d30d6a9577487f02210099248041411d0aa7abff41fd3dbd64d728a64ddc00870d47231c3ec44914560b0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016521dfdc5d000004030048304602210094552efde7b0dffb7a412eaa94f31ae96b28358ee8e60b6474a4564858f1726a022100f8bf4263f939644e83da30709285c265484a9e8f61c7e12229bdddb532456bd0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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