www.gmw.nhs.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8c:e3:65:c7:fe:2f:50:45:f7:66:a5:03:5d:21:2d:31:c2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.gmw.nhs.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8c:e3:65:c7:fe:2f:50:45:f7:66:a5:03:5d:21:2d:31:c2
Serial Number (int): 309278652397576119990723547259558964310466
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:61:ff:58:a0:d2:36:bb:15:26:97:80:98:4d:24:44:90:e2:21:ef
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dc:54:6d:95:0b:66:cb:c7:a2:3b:35:59:b7:86:8b:8f:a9:a4:a7:45
Fingerprint (sha256): 73:1a:1c:8d:b8:d7:7e:e5:8c:56:56:d6:91:2c:aa:10:ed:d1:a3:09:8f:60:c8:3b:40:c4:9b:0d:e8:b3:d5:b5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.gmw.nhs.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gmw.nhs.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gmw.nhs.uk

Other certificates including the domain name gmw.nhs.uk

(limited to 100 certificates)
sip.gmw.nhs.uk
DirectAccess-NLS.gmw.nhs.uk
gmw.nhs.uk
ara.gmw.nhs.uk
owa.gmw.nhs.uk
www.gmw.nhs.uk
adrms.gmw.nhs.uk
gmw.nhs.uk
Documents.gmw.nhs.uk
ara.gmw.nhs.uk
learninghub.gmw.nhs.uk
sip.gmw.nhs.uk
outlook.gmw.nhs.uk
learninghub.gmw.nhs.uk
gmw.nhs.uk
outlook.gmw.nhs.uk
www.gmw.nhs.uk
www.gmw.nhs.uk
owa.gmmh.nhs.uk
owa.gmw.nhs.uk
gmw.nhs.uk
outlook.gmw.nhs.uk
www.gmw.nhs.uk
sip.gmw.nhs.uk
sip.gmw.nhs.uk
gmw.nhs.uk
www.gmw.nhs.uk
learninghub.gmw.nhs.uk
owa.gmw.nhs.uk
gmw.nhs.uk
owa.gmw.nhs.uk
gmw.nhs.uk
Documents.gmw.nhs.uk
www.gmw.nhs.uk
www.gmw.nhs.uk
*.gmw.nhs.uk
AutoDiscover.gmmh.nhs.uk
sip.gmmh.nhs.uk
www.gmw.nhs.uk
www.gmw.nhs.uk
FTP01.gmw.nhs.uk
owa.gmw.nhs.uk
www.gmw.nhs.uk
gmw.nhs.uk
www.gmw.nhs.uk
www.gmw.nhs.uk
gmw.nhs.uk
gmw.nhs.uk
www.gmw.nhs.uk
IP-DECT6500.gmw.nhs.uk
gmw.nhs.uk
www.gmw.nhs.uk
www.eol.gmw.nhs.uk
outlook.gmw.nhs.uk
www.gmw.nhs.uk
Documents.gmw.nhs.uk
www.gmw.nhs.uk
www.eol.gmw.nhs.uk
sip.gmw.nhs.uk
ara.gmw.nhs.uk
DirectAccess-NLS.gmw.nhs.uk
www.gmw.nhs.uk
ara.gmw.nhs.uk
OWA.GMW.NHS.UK
gmw.nhs.uk
gmw.nhs.uk
sip.gmw.nhs.uk

Certificate

The complete raw certificate details for www.gmw.nhs.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6TvuVeor7D0uJmzWFiWT
1ewiDWTxBUwPu2dqPzG1nY5k/havxEK4xb8kFuUlKRbiK3+ppYt4Uvn0dWTc5s5D
Ux5xp5wwA4MA2ePIrozcdJuMNkcB/QyVVvRTd4p9H27apnZuAFJZQmyOgsFZNkFD
jTGc5reCznpizmq1NsPhI21qB1zyw2ds0qsBTgD++wSIK8X/QZ6ZnHRiMyNVYQMY
FaIkYGnkd84pUYufNvRlJSYvFb6DIcyUvDb93c2cZZMu9HLpbZy7w0w+ENBMHFoK
MBa3UAnJS6j7dSmhkTAyvHlHr4Vmdy08zSAWr997TmAQKG0bkdgQ46UBUkOzpuHA
jqOCIt5IUvOSsAYBBJYJ3RT3zFmPL29BF/s1mtD+31URkLXN9XcaNJS9+LQ9g+5G
+Zu+lGPaGcThEqEg99ilafVL/Ta5eI7129O3fgtCRoV69pyIBDwvCnqw/TrpRbU5
trY05GRougBR7RkqM7RYyT+bq1T1l/psE/kvZMDo0FzTLd4lL5xc2X7xCVrf+L7l
iL9TVPTUrwSeCSadCOesHjnU5kqG9rb9j5oUGoW0F+4zd9r+0uu0PTHwQy/LBQ9W
DMn8JOojdeVAW97hziHKWiytp/IYdA8zbc/kY+jEXHCdBZ5abkTAV09e8hi+qW//
wPon75W4+o0hioBAZdmUOMUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309278652397576119990723547259558964310466
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-10 09:01:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-09 09:01:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gmw.nhs.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 951512134810941859551565497991873562807148604734931630045776897753114162017643137943900626170832513292174546560092447829600914542933925807354739053863669334239739572359381259708850182684911591627843929090881528019247777501639963273004297656114807588372846483202084839566156806003582436788269993718030943414175280194782068100319690036974379819438491157656057289741386075748507144891010063802397878879712615418898787535144740032058903400572768411791927968041265910647979613510376127611205690542810812277536736849160883969465036421299738587682293041585725543718947602232657991470192344630177283563640993175292536572793262839360376579929547681057853791835093288115795844001457245375819888730830238045051263033532655512555029094789492924249607670592418919181196066324173156042520926062889474182563090789980588277611166266620323672017405840015716398455167880313451605597356793399245554069144720563232227098880009993020414956352171849246386153453025860922648198048671333763436649038140858919634423379889579063331302248194862762170898755807365312148759748961623909922150455338022042289304721952191611979474612049775502069181195939877142160217096169790311979954213334437318180579283564550155057882747451536497264320237561246300276668862052549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7061ff58a0d236bb15269780984d244490e221ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmw.nhs.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165c2edea0e00000403004830460221008e416358032fd1ef68ed1297832bb1c66a672c8aac6c573d1a398c4274560cdf022100905cfe9bb0391b98062058f0dcac432e9d79c698787cdf67752712c39e194f9e007500c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000165c2edebc50000040300463044022072800b6ccc87de9e31ea38435832b6b400dd864386e85587698b7c9e7820c7bc02200c43af4ecd0e09fb266ba95b07aa50f59b42da7e7efe78cb3f4ba5c633fcd9e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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