portal.chsgroup.org.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:93:26:7a:98:7c:d3:c2:e1:93:d2:99:23:5d:67:53:8d:f7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=portal.chsgroup.org.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:93:26:7a:98:7c:d3:c2:e1:93:d2:99:23:5d:67:53:8d:f7
Serial Number (int): 311409512949531350961892087761862149770743
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ea:1d:5e:89:e0:86:0b:ef:56:47:a3:d6:40:a0:1a:3b:82:86:36:b1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d7:ca:e6:1a:2b:3c:80:13:5b:b6:38:35:4b:b4:9d:76:90:69:b3:7a
Fingerprint (sha256): 6e:51:a3:3a:7a:5a:bc:f6:67:ee:34:86:10:e2:d7:ea:53:d6:1e:c8:2f:60:4a:4b:f7:f1:e4:93:07:3d:96:9f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate portal.chsgroup.org.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.chsgroup.org.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.chsgroup.org.uk

Other certificates including the domain name chsgroup.org.uk

(limited to 100 certificates)
suport.staff.utcluj.app
www.chsgroup.org.uk
apps-portal.chsgroup.org.uk
support.ecctis.com
chsadmin.chsgroup.org.uk
apps-portal.chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
support.tuxexpert.com
support.ecctis.com
servicedesk.cheaperwaste.co.uk
newsletter.chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
ithelpdesk.uteco.com
chsgroup.org.uk
sd.sch1584.su
portal.chsgroup.org.uk
chsgroup.org.uk
chsgroup.org.uk
newsletter.chsgroup.org.uk
support-services.gruener-punkt.de
portal.chsgroup.org.uk
servicedesk.quorumdev.com
portal.chsgroup.org.uk
www.chsgroup.org.uk
dsi.alivetravel.com
suport.staff.utcluj.app
www.chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
portal.chsgroup.org.uk
chsgroup.org.uk
helpdesk.zultys.com
sd.sch1584.su
support-services.gruener-punkt.de
support.tuxexpert.com
apps-portal.chsgroup.org.uk
chsgroup.org.uk
www.chsgroup.org.uk
apps-portal.chsgroup.org.uk
helpdesk.derbigum.com
support-services.gruener-punkt.de
servicedesk.quorumdev.com
ithelpdesk.uteco.com
www.chsgroup.org.uk
gateway.cambridgehs.org.uk
techteam.awayresorts.co.uk
portal.chsgroup.org.uk
chsgroup.org.uk
support.gjesdal.kommune.no
ithelpdesk.uteco.com
ithelpdesk.uteco.com
dsi.alivetravel.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
gateway.chsgroup.org.uk
portal.chsgroup.org.uk
chsgroup.org.uk
chsgroup.org.uk
chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
portal.chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
chsgroup.org.uk
support-services.gruener-punkt.de
helpdesk.derbigum.com
portal.chsgroup.org.uk
servicedesk.chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
chsgroup.org.uk
chsadmin.chsgroup.org.uk
dr-apps-portal.chsgroup.org.uk
suport.staff.utcluj.app
portal.chsgroup.org.uk
newsletter.chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
portal.chsgroup.org.uk
sd.sch1584.su
chsgroup.org.uk
helpdesk.pgzinternational.com
techteam.awayresorts.co.uk
portal.chsgroup.org.uk
newsletter.chsgroup.org.uk
portal.chsgroup.org.uk
www.chsgroup.org.uk
support.languagelink.ru
servicedesk.cheaperwaste.co.uk
chsgroup.org.uk
portal.chsgroup.org.uk
servicemanager.loacker.com
chsgroup.org.uk
chsgroup.org.uk
sd.sch1584.su
itservicedesk.eu.anritsu.com
chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
www.chsgroup.org.uk
servicedesk.solidsolutions.co.uk
helpdesk.zultys.com

Certificate

The complete raw certificate details for portal.chsgroup.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311409512949531350961892087761862149770743
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-07 14:47:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-05 14:47:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.chsgroup.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 757253362443339149233009522637591101388916726772119940260574803712732271430466879400859077277940280905708707640754296165971597147697206059647317851866036727676297549549614039682340105570170430505516165254700505346453938078852029491044351452841839573216771760937347663860672025145862612466885244658832920974552672206811511957938299399796270351049359241098542283543298557020745535250530613590427572149498222751627363456702905173933177058348370933081272707463265219757995727613199057696964620709506350519281406878860304005582548850762097636238193547004625582334958813562723080799540958576990437343956375199887317946355238218092223408560768156432447000269930155262771830495533636421189803120702326307394321719066187534943562059272934920730506039172083630250306161207131780944983340546798377289515431903740664673336104943821792927324243903640130978720941789513740947387632658900236811525249097057605974700532798756293152081282311306239915962011866715674562321650224508402251344651150324468392015109963276869807184258835552033117670780333039071254656557342266845309352819607528631217889315699873611900868993441647884412125892218736462756937859893728379468969718616208823186242672958324098122190584291017755058950100733790884530599693705751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea1d5e89e0860bef5647a3d640a01a3b828636b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.chsgroup.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006adfd6f4723db14acc2ea52c4baaa971cce202e7602cd02c36d61d9c5ec326a2d4d9a5d4c0a4252ad2f6462174404ee42fecd5eaa81b92b63798065163eb3c2509c5fc68800d85bf88f8da35f7695dbee6d9a218c77a5274be6adb323277df5a064d093dc8a6b3c78ce342e808e850e2118272e408ff934be72de4924d867de6e46f6f849c70a2bcd0bccb631b99da708aebb8cc703619ea4a0895da6c178c1569992650caf72caca720359f2ad1eb5bc26aa20d33aac878731762618485837b8aaa009e724abfa7cb9198594c7305c2c036956c59ed02bc749bbb5e50aaa39cf6a89f4995fe8ecb98a5e62a1c897f7d87a409defaa32abcd8d1b84c279c2d8a