chrisbarnardwindows.walthamabbeylife.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:50:f9:4f:14:01:05:1d:1d:72:ce:31:e1:62:08:40:69:47 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chrisbarnardwindows.walthamabbeylife.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:50:f9:4f:14:01:05:1d:1d:72:ce:31:e1:62:08:40:69:47
Serial Number (int): 288890835517087088179189332067566951098695
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 45:cd:83:22:45:02:9b:10:fc:d2:0f:50:27:4e:da:64:ad:c9:50:1f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 05:1b:0b:14:06:75:88:ef:3e:2a:73:d0:bb:8b:89:cd:30:17:b9:e3
Fingerprint (sha256): 86:c1:76:c8:43:5f:11:28:bc:52:91:ef:8a:02:cf:8c:09:e5:ed:79:ef:0f:60:b4:f3:8a:b0:2d:55:1d:c1:77

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate chrisbarnardwindows.walthamabbeylife.co.uk

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chrisbarnardwindows.walthamabbeylife.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ataaltd.com
ataaltd.walthamabbeylife.co.uk
chrisbarnardwindows.co.uk
chrisbarnardwindows.walthamabbeylife.co.uk
lynnesflorists.co.uk
lynnesflorists.walthamabbeylife.co.uk
mail.ataaltd.com
mail.chrisbarnardwindows.co.uk
mail.lynnesflorists.co.uk
mail.waltham-abbey-life.co.uk
mail.walthamabbeylife.co.uk
waltham-abbey-life.co.uk
waltham-abbey-life.walthamabbeylife.co.uk
walthamabbeylife.co.uk
www.ataaltd.com
www.ataaltd.walthamabbeylife.co.uk
www.chrisbarnardwindows.co.uk
www.chrisbarnardwindows.walthamabbeylife.co.uk
www.lynnesflorists.co.uk
www.lynnesflorists.walthamabbeylife.co.uk
www.waltham-abbey-life.co.uk
www.waltham-abbey-life.walthamabbeylife.co.uk
www.walthamabbeylife.co.uk

Other certificates including the domain name walthamabbeylife.co.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for chrisbarnardwindows.walthamabbeylife.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt69jHDsc5K54W2B2xgv7
RP8hd+MW1h4XFecYNahxLBe8AdABpnJxCN7SvXcAx+ejnI9Yf0x8nYBDrCqk29rU
I8+xkpxxm32GgoZPocwSwZ4PGENvx9KyRzktPIg1lhmyj3par5Jv4/h/L7DcvwP2
Emn3aE65+xSRfvCIPAmm/m0t+7DKJIuG2aYj8ljufwvl1ccqvc02QhUvZgsb638b
YvTi5sDWSNubxt+DiFYKafZWZMbFV6RYF5PtvOzcQYPppsvNMdY4QDepQIN6T8aZ
1enu3wEDDR639B6bsaSGUoLw/NHtKh/fvRJIteZ7lk7Iz62RVcOGmC7uOxIxD685
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288890835517087088179189332067566951098695
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-06 01:57:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-07 01:57:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chrisbarnardwindows.walthamabbeylife.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23188096435617515906792569682252345676231819913996742141341923833769187655135013817774932191761104125941340114519067507872779061243896422086530199094490690460266607588221765965787882032606595683353263677455990459149350645883447947488274172035541043860735690514251614466457398013371756746124414145608285163077518486542700503151851888530952760003677550156741408971754999507055090750960674476253091700128149606517862323917331819783100524606940396842973661169853498977450133591324206536786660448648261889119426227766607587140505676606645792351818589132571902742712279213275782848552738408363366695206986238507817542564311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45cd832245029b10fcd20f50274eda64adc9501f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (717 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ataaltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ataaltd.walthamabbeylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrisbarnardwindows.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrisbarnardwindows.walthamabbeylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynnesflorists.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynnesflorists.walthamabbeylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ataaltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.chrisbarnardwindows.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lynnesflorists.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.waltham-abbey-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.walthamabbeylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waltham-abbey-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waltham-abbey-life.walthamabbeylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walthamabbeylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ataaltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ataaltd.walthamabbeylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chrisbarnardwindows.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chrisbarnardwindows.walthamabbeylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynnesflorists.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynnesflorists.walthamabbeylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waltham-abbey-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waltham-abbey-life.walthamabbeylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walthamabbeylife.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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