dev.christian.org.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:32:51:bd:a9:e6:97:ee:94:ae:40:c9:d0:8b:28:d8:32:b7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.christian.org.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:32:51:bd:a9:e6:97:ee:94:ae:40:c9:d0:8b:28:d8:32:b7
Serial Number (int): 278459628399089225439533261620914729530039
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:b0:82:43:5c:a8:04:98:a2:d0:42:f0:7f:2b:5e:84:ad:d9:42:55
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 23:84:a5:f2:fb:a0:59:1e:03:44:0a:63:83:ae:73:78:66:06:30:f5
Fingerprint (sha256): 8c:75:44:59:d0:32:60:4b:38:ae:3d:c6:48:1f:d8:58:c7:b3:ca:47:15:e0:ab:7b:2b:be:56:4f:f6:cb:94:41

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dev.christian.org.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.christian.org.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.christian.org.uk

Other certificates including the domain name christian.org.uk

(limited to 100 certificates)
www.christian.org.uk
www.christian.org.uk
www.christian.org.uk
www.christian.org.uk
www.christian.org.uk
www.christian.org.uk
dev.christian.org.uk
dev.christian.org.uk
www.christian.org.uk
www.christian.org.uk
www.christian.org.uk
dev.christian.org.uk
www.christian.org.uk
dev.christian.org.uk
dev.christian.org.uk
www.christian.org.uk
www.christian.org.uk
www.christian.org.uk
dev.christian.org.uk
dev.christian.org.uk
dev.christian.org.uk
www.christian.org.uk
www.christian.org.uk
www.christian.org.uk
www.christian.org.uk
dev.christian.org.uk
dev.christian.org.uk
dev.christian.org.uk
christian.org.uk
www.christian.org.uk
www.christian.org.uk
dev.christian.org.uk
christian.org.uk
christian.org.uk
www.christian.org.uk
www.christian.org.uk
www.christian.org.uk

Certificate

The complete raw certificate details for dev.christian.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278459628399089225439533261620914729530039
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 05:25:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 05:25:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.christian.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769894617412432562863246796708225931661646087308783614742703773720006578917898382449644832458775338996609355452418801432041137773178050970757655039896316273114014508258010175865636196679193237575212290058233296968327947847872461909733177494638230580006321743713716867939637557547486357849982245899355457408830584212175677450572552188735713526073719130475101456853715139994226114098969566693389007750042629614598355650553855985131895791815810522458337316065185162391774948844627502997430027726604806928500292222606269553078303500669795974182942090985013466892960617705157939473044080028042355438313307540329966584641941269462481628479406886987191956886410034716474417742717653794986911471193635231191114317525936071976672646126741026557136355960542685993568412272347811347297205860003258375280661385846202626432441589853401836420675486836865802179798358065548348674199571495534915675861902665515156914672673461634160440564725608684712072234134336365324127542527963702684635710572522490244363460854327000218252116968908744178850945121002835889180659726233838945073853855923992700552667281377846328140505870072318200097443541085069356952745832679488964979560247335724421827933553306904473099341804837216147980968089514301058041516075251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54b082435ca80498a2d042f07f2b5e84add94255
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.christian.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001707b05bcc50000040300483046022100d24e747d175a0937228350af7ad904246e45e32d5e2fd67ca2ae01cf810fd9e4022100f48a3170d92adf4756f30c08446e37c953792ebc6d4badcdc151f645affe3a2c0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001707b05bd0100000403004730450221009d8344d9163b90ccff421f039e620dbe68a4087821434fe0eb06df531fd683c902206e3710d8b68cbc9f3a363f386468f6f0960d292ef63f4bb7bbc69d134793e130
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005240b96499fc25ae312b62350c7b79166e8ec65f5ffba1f304eef55a199a393fe01ddee50801098e0e38553e130e50c6175b788b5e8d0ec8a3352ad7c9f12c331a82691b4362be8f7b27674497e8af8a60d6e2f75c0275453bbc6396124e67545decb385fe32930e36a4d6ebd0a47348da7ab1a5ad3dc3194efd7441d8f42e1088f0c18e2c7717cafb5f9bef6784d0de0348c5e9d380033ca1f04b70969b17e3dff628dcf21d03346e4c33a6c5031b4775a9a5eb30738a60f1bae4f2bf466f8903e605b9184dfb018aea55e8d638eea069f8e4fa81a1d1d8409362392156c5832395d25cb1be4d6d99f00b32c45a227e6dd8fcb9e3d568da8462a41575d9058e