cambridgecandi.org.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cf:84:88:c4:0e:84:ed:c0:8a:66:bf:f5:b2:de:d9:c5:1d was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cambridgecandi.org.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cf:84:88:c4:0e:84:ed:c0:8a:66:bf:f5:b2:de:d9:c5:1d
Serial Number (int): 331951475972233987545461214261193540748573
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a9:2b:52:d2:f6:7a:6e:17:f7:4e:5a:e3:1b:09:66:3a:04:c9:f3:f0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ba:fb:6b:98:86:45:fd:b8:b5:fd:6c:c2:ab:93:6b:3f:03:d4:79:a3
Fingerprint (sha256): 7e:0c:3d:6a:d5:8e:5b:38:c2:cd:5e:56:6b:2a:9d:82:f4:ef:a0:5c:70:fe:cb:c5:40:3e:17:cd:b9:41:f2:65

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cambridgecandi.org.uk

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cambridgecandi.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cambridgecandi.org.uk
cpanel.cambridgecandi.org.uk
live-cambridgecandi.kissdigital.co.uk
mail.cambridgecandi.org.uk
mail.live-cambridgecandi.kissdigital.co.uk
webdisk.cambridgecandi.org.uk
webmail.cambridgecandi.org.uk
www.cambridgecandi.org.uk
www.live-cambridgecandi.kissdigital.co.uk

Other certificates including the domain name cambridgecandi.org.uk

(limited to 100 certificates)
cambridgecandi.org.uk
www.cambridgecandi.org.uk.cci.kisshosts.co.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
live-cambridgecandi.kissdigital.co.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
webdisk.cci.kisshosts.co.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
www.cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cci-new.kissdigital.co.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
webdisk.cci-new.kissdigital.co.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk
cambridgecandi.org.uk

Certificate

The complete raw certificate details for cambridgecandi.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjg2N2VRwE6fS9K/tn1z
9SvRCT9rrOuw/mUrxlBTCznoz7UlaEV73f0zoamDi7wossivJt51lcjbqRssxgTi
XBhEIJQwepZwTz79zl3H2Etccz0Z0foFw4TbXQQuWC9S+0bRcDfDtfRmKCRp8eGV
9JBtXs9vxtiySkHS6SeshyBOVoVBZgb8Y/ldnQgeJqc8CZktqzMpuoWw5bqcCgJz
vtD1yt2QY/aEAlZxPG2cvzqdgUoc7x6ngBAagHuIBQSuET9WEtCM9ynp6nc8AXuo
TuZCnvPaxHG0sGyft6rKqNd2NJKp4Q8owqhSfCg36qYkaM6lEmeQlsb/PhkWtaGl
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331951475972233987545461214261193540748573
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-20 01:39:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 01:39:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cambridgecandi.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19973371247826015894395552745319373399083066991518060543788867232329485746362210778206510949881661771470239794967787200260698224935465789745174713156317683777494346589859600474212400183405492741647130019645050203103511480107343249807767580986078150744071098837968826599040453364601381416039052611999728219448009901970219470761308318550076694029418861661301414658589815743804646227285680945957639130552508859184492521272742351074744877218712373994612320347195213518508260751796926207479924144882179819616671464479056304849116637517455289760956194977491928844029040579950796814048112741711987447237291735419793994523997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a92b52d2f67a6e17f74e5ae31b09663a04c9f3f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (300 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgecandi.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.cambridgecandi.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-cambridgecandi.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cambridgecandi.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.live-cambridgecandi.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.cambridgecandi.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.cambridgecandi.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambridgecandi.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.live-cambridgecandi.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016998f79895000004030047304502201a3ceb63e8b743b1363d9cebf6a24f77b5f258036bd2c4904751f0a11a62191e022100becc36fd71eb1fbc989df56f3c70cec478afda85b19dcdf0659a04600a0970fc007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016998f79a440000040300463044022001d41d3aac63844d4b25f7e7b7947142e02cbb5e59b18c0f380bae710856b583022043a14aa348c9ac2c15504ede682f2a305e6055a3e93c4af20a4cc8ddb2c131dc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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