greenlightinsurance.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:64:67:ba:8d:b3:d5:c0:93:56:cf:d4:37:11:27:d1:26:b6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=greenlightinsurance.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:64:67:ba:8d:b3:d5:c0:93:56:cf:d4:37:11:27:d1:26:b6
Serial Number (int): 295502973612223868420634585391932241946294
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 43:92:d6:68:37:5f:b0:95:53:6c:1c:10:56:69:79:17:58:57:2a:32
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2f:0c:b8:e0:77:00:61:f7:bd:4c:8e:d7:a6:c8:b9:cf:62:a5:5a:d3
Fingerprint (sha256): 75:85:3e:dc:d0:57:7b:c0:cb:e3:48:19:f5:0a:53:c9:5e:64:6c:14:c8:c9:fb:d1:02:fc:2a:9f:d6:b2:b5:cf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate greenlightinsurance.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for greenlightinsurance.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

greenlightinsurance.co.uk

Other certificates including the domain name greenlightinsurance.co.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for greenlightinsurance.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDEiVgG17g7MC/vhRbjM
6HrX9eo7f36pDi68xOLDUSwj3NW8IGz6rzoD2fC78ED/wEw6ObTPH7RCz/PFMPde
d8ui0ikxvl+NbbsJhUQNlJhJ1N/7lF7fqMomuF/BgYBxix7m88PE3Gq0W7qma3ex
m1kaLnV5XxXQr+V5pH0CF/nXowkahdEHD2qY60QHsnr96dipUE7EMCiYD8KpnC4P
iAXnf4ARnVfxcJn1kPlJC4VyiV4SJsd0VLNwJnkn5Axe3RoUiTQcACSljB655l6K
Qa0RCtBQc1aVeuZDZKI+W/zlOlokAEHcvTX9MDFN+FzDhTmkbn1S/IAX/t+LO0ty
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295502973612223868420634585391932241946294
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-04 12:14:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 12:14:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'greenlightinsurance.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18202544855104794131228449332307614603300599169088253490042790981131495182550694589725225074256312815059575167546916315249005445365775512540720731128442332922508152975244350384095155929110172597346320713475364359247703252713717937451709190824277726597898936473919329042707632666557037530737553383222701713682846471085941525242918187410106024024872696714415162241958181487226288174066440489791789950203663563354223767432960270831157844449521499087536607070090044915352000748870854008839190816200062549367431889390044549529008296901690807301334752833195875162112423579008126377016435313379234632863069335785960630874671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4392d668375fb095536c1c105669791758572a32
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenlightinsurance.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b9a783aee000004030047304502210080a17ad054987e0790e85ef1fa9df9efe905eacfdbf7da6ba0f241208e2da28a02206cc23862c266d4253c1131c10ea842e1b00dc4ee9b94455940a2f228c0069ffc0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b9a783af50000040300473045022100fc288a8fb35f7f72fa56b671f759de55d5a4cfd56a916f63131ab9295e800a7402203f0312ca228878b13df625a9da2f758c9e62a4a58566ea32cfdf84db8a99a5da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006f8c400e1fcfa86b78a45a2ceb28603e31d3b0419947aefafa8168167c6d5ef9f321c8d907bec00b7824486fe6afac4724310b36dfdde929ffd40a89b23ddb25c58e148eed0d8af8b02ed928f935e734ea8c6a6081e90196a4986b66c115677c33360e22fc95abef6a86245b7d3a6049f19daab227d972ecf27c5dd319e1297f71a79684036a0bdf32e7574b5305468df54ba6279960429c50d5b74e3c0d756b782bb5d903de758f4e2ce44d91602217dcf193feffae7cd4906a2e49501a5fc8c8b89c69e873d2ec0255d466b530707f3b14ba6011a205de00007dc18951fb719b1d9bdc208c6650aa02e3aa8e35d6e8ed40b16fa7197d56358ee9ca2eaf743f