cwmarian.org.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:4f:a5:10:3a:4f:dc:62:f0:0e:d7:39:bd:b4:ff:2d:ce:3a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cwmarian.org.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4f:a5:10:3a:4f:dc:62:f0:0e:d7:39:bd:b4:ff:2d:ce:3a
Serial Number (int): 375550857592556361037329880998860666293818
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 62:64:1c:e2:3f:93:c3:9e:c9:b8:36:03:0d:b1:14:c4:27:9c:c8:25
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c6:fb:00:76:92:03:17:64:85:3b:17:06:55:1a:11:fa:a3:83:12:90
Fingerprint (sha256): 76:3f:df:54:04:07:41:06:6e:38:e5:bf:c3:7f:67:0e:0b:1b:a3:92:99:89:9d:90:5c:e9:ff:bf:0e:b0:5e:39

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cwmarian.org.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cwmarian.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cwmarian.org.uk
www.cwmarian.org.uk

Other certificates including the domain name cwmarian.org.uk

(limited to 100 certificates)
www.cyswllt.cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
mail.cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
www.cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
www.cwmarian.org.uk
www.cwmarian.org.uk
cwmarian.org.uk
www.cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk
mail.cwmarian.org.uk
cwmarian.org.uk
cwmarian.org.uk

Certificate

The complete raw certificate details for cwmarian.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLbbjbQiQX0hAeyZkSTw
2JLuA+/iZTR2+lQ5B1mYJ9We8gv3OZtgBEchl8YjeJ1UrWKW3VlOql/O+9xVlUIh
HPzNLNCfE3uaf5C3JDGF9aEpHmIW3dyeybbFibQbl49MGXS5ZZT63ZKo9NhJbYwP
SnjtYlp19a0pblBxV5+QzJDDGCi/erw/sE5ti6HT9VSho+olY3GkAogpHn4Jd7jL
gTGDR2VmUNRhdwc3z9g38lDI15T+BID3kRmWKaoM6KOc23vHKZaOPNwIT/dHExpi
Qs0mAyMrwwHj9JimKjl0zHNZeQYZUrZiw2wJ3qYoKJAt+uPI5DhSwZBoO+9D7ELy
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375550857592556361037329880998860666293818
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 01:58:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-07 01:58:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cwmarian.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17763533153781519974972330772082959558840344079962499728883313700210548728131153067448797806689787389160388813606902700912938201773919538049064768623555563855863576188671790821926582190855150782109088806828874049830627642578348640340545553733285058517507927672946218561654112032439315441603489133046146147260231549995684607743997128655599800684586899986471992741930336254594712495527283373693850191592123871687341186323253975480918894630015677342859458718195047250313595199867572172573944650207817265768101405164887415397254004202184637846529632564288949643210739008967081798046639090652406242443152952168166858093251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62641ce23f93c39ec9b836030db114c4279cc825
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwmarian.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwmarian.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017157b96aa80000040300463044022022086e0c1784570e6077d861bd20079679407a9a440de351166139b8feed2e78022069f6e8e9c5567d129a6ef0e0cb3c948f8d562054eec86e0d69b3ecbb7ac3e4a600760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017157b96aa70000040300473045022100894946b6a37965bb87b982118e9e6e974acae6ae13dcfa6b3ab1cf3bab57ed6c02201aa3cdd0ec06843e011c391f66c15f7b33b5d19cee3d92c142993b1fe512e1d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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