avivacommunityfund.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7a:a2:67:6e:f8:3b:cd:17:29:f6:e7:c4:88:f2:12:f6:56 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=avivacommunityfund.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7a:a2:67:6e:f8:3b:cd:17:29:f6:e7:c4:88:f2:12:f6:56
Serial Number (int): 303067178552260966201041875732562489570902
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 19:e4:4a:26:ea:77:be:91:3e:b5:29:72:ec:bc:e9:e9:74:29:fa:a9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f0:96:9e:8f:a4:1c:56:3a:3f:db:93:62:45:e1:32:ce:ca:7c:03:a2
Fingerprint (sha256): 70:c2:11:9d:d9:b7:c6:e3:78:37:4e:74:fb:11:f8:5c:17:61:13:c6:f0:66:7b:50:ab:81:fc:59:7e:1a:38:7d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate avivacommunityfund.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avivacommunityfund.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avivacommunityfund.co.uk

Other certificates including the domain name avivacommunityfund.co.uk

(limited to 100 certificates)
cert01.uk.aviva.com
cert01.uk.aviva.com
cert01.uk.aviva.com
cert01.uk.aviva.com
cert01.tmp.aviva.com
avivacommunityfund.co.uk
avivacommunityfund.co.uk
avivacommunityfund.co.uk

avivacommunityfund.co.uk

avivacommunityfund.co.uk
avivacommunityfund.co.uk
avivacommunityfund.co.uk
cert01.uk.aviva.com
cert01.tmp.aviva.com
www.aviva.co.uk
cert01.uk.aviva.com
cert01.tmp.aviva.com
cert01.tmp.aviva.com
avivacommunityfund.co.uk
avivacommunityfund.co.uk
www.avivacommunityfund.co.uk
cert01.tmp.aviva.com
no.avivainvestors.com
avivacommunityfund.co.uk
cert01.tmp.aviva.com
avivacommunityfund.co.uk
cert01.uk.aviva.com
cert01.tmp.aviva.com
avivacommunityfund.co.uk
cert01.tmp.aviva.com
avivacommunityfund.co.uk
cert01.tmp.aviva.com
avivacommunityfund.co.uk
avivacommunityfund.co.uk
cert01.tmp.aviva.com
cert01.uk.aviva.com
cert01.uk.aviva.com
cert01.uk.aviva.com
avivacommunityfund.co.uk
cert01.tmp.aviva.com
avivacommunityfund.co.uk
avivacommunityfund.co.uk
avivacommunityfund.co.uk
cert01.uk.aviva.com
avivacommunityfund.co.uk
cert01.uk.aviva.com
cert01.uk.aviva.com
www.avivacommunityfund.co.uk
avivacommunityfund.co.uk
avivacommunityfund.co.uk
www.aviva.co.uk
www.avivacommunityfund.co.uk
avivacommunityfund.co.uk
cert01.tmp.aviva.com
avivacommunityfund.co.uk
cert01.tmp.aviva.com
avivacommunityfund.co.uk
avivacommunityfund.co.uk
avivacommunityfund.co.uk
cert01.uk.aviva.com
cert01.uk.aviva.com
cert01.tmp.aviva.com
avivacommunityfund.co.uk
avivacommunityfund.co.uk
avivacommunityfund.co.uk
cutredtape.co.uk
avivacommunityfund.co.uk
avivainvestors.lu
avivacommunityfund.co.uk
cert01.tmp.aviva.com
cert01.uk.aviva.com
cert01.uk.aviva.com
avivacommunityfund.co.uk
avivacommunityfund.co.uk
avivacommunityfund.co.uk
avivacommunityfund.co.uk
cert01.uk.aviva.com
cert01.tmp.aviva.com
www.aviva.co.uk
avivacommunityfund.co.uk
avivacommunityfund.co.uk
cert01.tmp.aviva.com
avivacommunityfund.co.uk
cert01.tmp.aviva.com
avivacommunityfund.co.uk
avivacommunityfund.co.uk
cert01.tmp.aviva.com
cert01.tmp.aviva.com
avivacommunityfund.co.uk
avivacommunityfund.co.uk
cert01.uk.aviva.com
avivacommunityfund.co.uk
avivacommunityfund.co.uk
www.avivacommunityfund.co.uk
cert01.tmp.aviva.com
avivacommunityfund.co.uk
avivacorporateplatform.co.uk
cert01.uk.aviva.com

Certificate

The complete raw certificate details for avivacommunityfund.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTgoQPxwAO6tjumRM1pl
CvJkz+zChV5Dy0+RgnMrbcF+24BBh4Fq7cekiujqPexGwuVNdZefyoDDBD1Hw2p9
d6IGv3zMC5hrrRn/Gt5Uv4II5FBmez2Mi6sy/jw8YmXF2dcDQ5/ZuBvn8D7Hj/HT
J4YTzrjTH2UESHtOz8GCQmY76LBivxKncarn4O4yNfbnVMqe6rMov1OzWS2va7jS
U61QHWHnZR6STYE9t2P1nzPM8twP9yhfxG1dEpZRtI17TG8l/I2PaPoPj7tdFtJO
1KLJGhXk4GMT1JNRdgtj+4m+lCzDkcL4kqRhzGNaUP7ppIeyS6PMhGhRWHPAAeCJ
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303067178552260966201041875732562489570902
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-08 21:43:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-07 21:43:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avivacommunityfund.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22876825366795216334035305506547679003040245805150820873125896959492807636428534995856682057460595573986466159161043465065135816989427887973804963784145960102408911778829173022942632393092089617504505241637235242748814679502627726195265477949069955794066823281750749052009391774869703707608113160088650920596276530042634916281516969560133923939659003204750601717008991539405562899389537123164629198465526614012088152028533469429688532931471211801820426292812783667662410321953090912906702969784764749822079987752163942826383441970254878390309335477032181111915146844037626468949536996865969053927539199243424144329091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19e44a26ea77be913eb52972ecbce9e97429faa9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169ff1ef968000004030047304502203005996a1f5885a6abfe52cfcc7f1258d39a1284309f05102fdfd7956d9a5853022100934dccca7f1cabd43296f1b746d2050658c0005ac34660d52a9f6f004de15b4000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169ff1ef9d40000040300463044022037ddca7e80dd3599ec8017424600c783421db3664240f38b244b7fe70b4aff6c022016ee82f549de7324be0c3376b4f5102659c27546eb9e44c54bae5918ccbf3884
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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