www.benchmarknorth.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:c5:5f:dd:af:da:45:51:fe:b9:b4:88:61:cd:74:1d:e6:d9 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.benchmarknorth.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c5:5f:dd:af:da:45:51:fe:b9:b4:88:61:cd:74:1d:e6:d9
Serial Number (int): 328499911802625794105716017520523287062233
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 04:77:4d:39:e9:a7:bb:0d:e8:ca:92:7e:c1:8b:5c:9d:40:8b:d7:7b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0f:63:58:e7:97:46:b4:82:36:76:e6:c7:c0:2c:b2:af:39:d4:5b:56
Fingerprint (sha256): 79:b8:9d:29:cd:2d:39:db:34:66:7b:e2:78:db:ec:e6:86:ba:7e:5b:df:15:5b:72:d2:60:3e:81:b6:0d:a6:c8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.benchmarknorth.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.benchmarknorth.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

benchmarknorth.co.uk
www.benchmarknorth.co.uk

Other certificates including the domain name benchmarknorth.co.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.benchmarknorth.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328499911802625794105716017520523287062233
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-29 19:42:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 19:42:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.benchmarknorth.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 881926921852504539075741379046078078945186721328841219515007660867063978114147417235830724579573821948838025070679070697297565445788940558386092497913053986677665732619872863590133049487329736789412240758502768161656456454004018748294436879463635269137346385898864785836970704529101420128603193323485758096844450827582630309327175402403120531613997946009569672320908057574369937540552122496648133116624877067642416778231458837788307304921287360146846926517823980356380006592947819884586456090396331184375236522206079921454364099120843292496490125094503457554002180602808808861353346753429931391942883555070982530554134598121563960618801044643054122851390629744715205443076210642817448730096335978113066247610436709494191777294258815870914483347946453465326427259298288511241348025263856060219895794923021121524383879354177563694251239190707402316974454878517679542223467467400512791554326007176887338039552248936406473979142998300259678529503167287498704345705153055958220867918451158594940432197695856124985126306892152520260799416019567738941160353293356112235591706828587553180982908349298598882630069158860808897946252366360182420695929062430600465279566364739918050630473504905571616122897346949429231175183496705302152509538023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04774d39e9a7bb0de8ca927ec18b5c9d408bd77b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benchmarknorth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benchmarknorth.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a4308f854000004030046304402207ea02989b191faf16dd578238fbb4de2bf6e5a232f5b3527fef2e38f64c5cf7302202c02826c23061a50fadb3ef2528714f70a007f70cd4a2951637e8394365a7097007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a4308f88c0000040300473045022100dcbf77aae816bf550aa6e55d597679a5f61943e8b5ebadfd08c4c5d67aa8c6e80220755fdd2652bc42a7ca0259d407268c51004cbcae6bdc08b099b0e72834bfef2e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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