craft1.freeukgen.org.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:f4:2d:55:19:07:c4:e6:06:d5:40:01:2b:0b:fd:fd:7d:38 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=craft1.freeukgen.org.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f4:2d:55:19:07:c4:e6:06:d5:40:01:2b:0b:fd:fd:7d:38
Serial Number (int): 344426012436708796075587272490608274275640
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b3:6d:fb:d3:a6:6a:5b:b1:47:68:cc:0e:7a:02:1e:9d:40:3d:55:3c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b8:9f:ca:cf:30:d8:75:7b:40:cc:08:7e:7e:d6:ac:55:09:af:6a:52
Fingerprint (sha256): 72:31:07:d7:fb:6f:ae:7a:3c:5b:f7:dd:f8:cc:a3:d7:e3:61:56:f5:f5:db:e3:d8:d7:95:56:a4:9f:e6:ca:4b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate craft1.freeukgen.org.uk

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for craft1.freeukgen.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

craft.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
craft3.freeukgen.org.uk
freeukgenealogy.org.uk
www.freeukgen.org.uk
www.freeukgenealogy.org.uk

Other certificates including the domain name freeukgen.org.uk

(limited to 100 certificates)
craft1.freeukgen.org.uk
test.freebmd.org.uk
freeukgenealogy.org.uk
test.freebmd.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
test.freebmd.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
www.freeukgenealogy.org.uk
test.freebmd.org.uk
freeukgenealogy.org.uk
mail.freeukgen.org.uk
test.freebmd.org.uk
test.freebmd.org.uk
test.freebmd.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
test.freebmd.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
freeukgenealogy.org.uk
test.freebmd.org.uk
test.freebmd.org.uk
craft1.freeukgen.org.uk
test.freebmd.org.uk
test.freebmd.org.uk
freeukgenealogy.org.uk
craft1.freeukgen.org.uk
test.freebmd.org.uk
wp1.freeukgen.org.uk
freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
test.freebmd.org.uk
test.freebmd.org.uk
mail.freeukgen.org.uk
mail.freeukgen.org.uk
craft1.freeukgen.org.uk
mail.freeukgen.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
mail.freeukgen.org.uk
freeukgenealogy.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
test.freebmd.org.uk
craft1.freeukgen.org.uk
mail.freeukgen.org.uk
test.freebmd.org.uk
craft2.freeukgen.org.uk
test.freebmd.org.uk
test.freebmd.org.uk
mail.freeukgen.org.uk
test.freebmd.org.uk
www.freeukgenealogy.org.uk
test.freebmd.org.uk
www.freeukgenealogy.org.uk
test.freebmd.org.uk
test.freebmd.org.uk
craft1.freeukgen.org.uk
test.freebmd.org.uk
test.freebmd.org.uk
www.freeukgenealogy.org.uk
test.freebmd.org.uk
test.freebmd.org.uk
craft1.freeukgen.org.uk
test.freebmd.org.uk
test.freebmd.org.uk
test.freebmd.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
test.freebmd.org.uk
test.freebmd.org.uk
grafana.freebmd.org.uk
www.freeukgenealogy.org.uk
mail.freeukgen.org.uk
test.freebmd.org.uk
mail.freeukgen.org.uk
www.freeukgenealogy.org.uk
craft1.freeukgen.org.uk
test.freebmd.org.uk
test.freebmd.org.uk
www.freeukgenealogy.org.uk
test.freebmd.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
craft1.freeukgen.org.uk
test.freebmd.org.uk
test.freebmd.org.uk
mail.freeukgen.org.uk
test.freebmd.org.uk
craft1.freeukgen.org.uk
test.freebmd.org.uk
mail.freeukgen.org.uk
test.freebmd.org.uk
test3.freereg.org.uk
test.freebmd.org.uk
www.freeukgenealogy.org.uk

Certificate

The complete raw certificate details for craft1.freeukgen.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lInljuyRiHyW5yTKQFq
hUE8cKJXJKVYQkZupDM//0xbD3BPLYfrx2ftKs6cq5Q+MlPFnWGO4FR+XaV++WPB
hhIFUM4KiicAhPtnU/LPp2sDaM60FhLg/UHf6Ezpaqbb8COiND8K2liYkDfp5/D2
ov3KU7o8tgQzojuvzDi1IjEhgpUmI6A5bIMJuqWoAdzmIYOYlHrNS82shp1MQ38h
OW4ld/wSvuE/P2RJqUBfTnpsXIwS3gOh2DnkeCW9ufAyKklEYBwjxKg0u7v6vs0d
r4+7uYEsSFG46J4yWSXVFfwlj0qIr264tAUihTrLKvC3NOrHHEdZpzPtVtE2NkJu
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344426012436708796075587272490608274275640
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-01 01:31:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-30 01:31:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'craft1.freeukgen.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27560462443576240072306703145490281017930497925205654004534152483267947161590989135831592002746213747341209037478603796835967660655884246524661150133588566887113624760306816214986452092426549189699156188355333387651401545546954456379608916005383562790557719399274206109111017899018810069189539666095395868038179702566058640998868375155174693093192007644416310666498201800571400005892272931897873383072217983666368149996038128181757047838604859329693199365223715744627378061059077862410448917404788523119202753163933957500164096552075179751451813818388426924844527910478729070881109879536386453270870935496975056006879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b36dfbd3a66a5bb14768cc0e7a021e9d403d553c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craft.freeukgenealogy.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craft1.freeukgen.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craft3.freeukgen.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeukgenealogy.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freeukgen.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freeukgenealogy.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189aeef5626000004030046304402203361877811aa7d8960fea4250fa84b239d7cf8daa92515965879ff3473d68bd7022073cd765b322f9d3afd114dfa96da3e86ce8b851d2dbd9165cfe96ab3bffdf6b7007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189aeef56110000040300473045022100a00bdb457e39370ce21da7a139e420e412960a99ae55ef230fd813e24d8de12c02201b7545fdf61936efbc50b0bc1040fe89de8b7632f38310adf11635d3fc02c270
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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