thefarthing.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:75:08:76:f7:50:88:79:52:76:c8:04:61:e2:94:53:bc:e2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=thefarthing.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:75:08:76:f7:50:88:79:52:76:c8:04:61:e2:94:53:bc:e2
Serial Number (int): 301161146256161788335618722802437157272802
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:79:bd:db:e3:6f:d9:df:fb:cc:f2:df:9b:c2:4f:85:7f:c3:77:95
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 32:ae:78:c1:aa:20:4d:ca:6d:11:7b:c0:d9:66:31:bf:df:69:c0:dc
Fingerprint (sha256): 8c:c3:f5:68:0c:02:77:45:4b:b8:55:03:ec:ed:ee:79:3c:5a:87:4e:43:07:90:84:4c:36:00:8e:47:84:b2:01

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate thefarthing.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thefarthing.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thefarthing.co.uk

Other certificates including the domain name thefarthing.co.uk

(limited to 100 certificates)
www.thefarthing.co.uk
thefarthing.co.uk
www.thefarthing.co.uk
www.thefarthing.co.uk
www.thefarthing.co.uk
www.thefarthing.co.uk
thefarthing.co.uk
www.thefarthing.co.uk
www.thefarthing.co.uk
www.thefarthing.co.uk
www.thefarthing.co.uk
thefarthing.co.uk
order.thefarthing.co.uk
thefarthing.co.uk
thefarthing.co.uk
thefarthing.co.uk
www.thefarthing.co.uk
thefarthing.co.uk
www.thefarthing.co.uk
www.thefarthing.co.uk
www.thefarthing.co.uk
thefarthing.co.uk
thefarthing.co.uk
thefarthing.co.uk
thefarthing.co.uk
thefarthing.co.uk
thefarthing.co.uk
www.thefarthing.co.uk
thefarthing.co.uk
www.thefarthing.co.uk
thefarthing.co.uk
thefarthing.co.uk
thefarthing.co.uk
thefarthing.co.uk
www.thefarthing.co.uk
www.thefarthing.co.uk
www.thefarthing.co.uk
www.thefarthing.co.uk
www.thefarthing.co.uk
thefarthing.co.uk
www.thefarthing.co.uk
www.thefarthing.co.uk
thefarthing.co.uk
thefarthing.co.uk
thefarthing.co.uk
thefarthing.co.uk
thefarthing.co.uk
www.thefarthing.co.uk
thefarthing.co.uk
thefarthing.co.uk
thefarthing.co.uk
thefarthing.co.uk
www.thefarthing.co.uk
thefarthing.co.uk
thefarthing.co.uk
www.thefarthing.co.uk
www.thefarthing.co.uk
www.thefarthing.co.uk
thefarthing.co.uk

Certificate

The complete raw certificate details for thefarthing.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWS6BcNXxGY63GClSqz2
J0P/xVD1gt1stCBi48f7bo8ye2lT3unizSTRZY/JuQoPDz/ApTz/7mut+XMawblp
PAFwbMi4OWyMbkjU4T2h3r/qd5iSEvZD5rs72DJzeRVQm3AtwzsEEBWIfKae0/D+
bmHd7lI+8E1XTmjapjmVrB1puestgSG6/VV2IGDOLunxiQ9Q7S7s5cclUi9sFcfw
zYCAEFIeDtvP5m8BBOxXY0f2Y9MgUPz7Hd2IS1g3rqDFdgQYlIGaD79Q/MP4zogV
c+aCvCkqU5bMY1lK2qp/vg6dZQwAGzq+Jc8ESVxAlBkMKlrZKrziY623KrEzqDje
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301161146256161788335618722802437157272802
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-29 01:06:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-28 01:06:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thefarthing.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25423569460740719340795566704887237480104656544190891077643769840471339857850752241897579473483286829884919475065426282681070463473008135913583455461298334844175002525467265979397362280613577784929881148593368941509070716518260605040573433007731330123602111049811358709042572352856151608744459737296339200510860731872686064601311096472461564287332474615907494657651163341934337844292670615032660448605120562065061867216882364403672973039723553134393541266774235046324258023662981716368747726489129385381985549987848456071057853517030369132682166129343306124651952911304696714193722073630429209684446243675426877136497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7879bddbe36fd9dffbccf2df9bc24f857fc37795
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefarthing.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000166231377270000040300483046022100eeb6acec1da359d4324b483bd29deb6548bf86ee2d5bbaf9e7394a17d4eba18d022100ccd22b474801e7ae885dff042bd0dcb3659ae86d36e022f9bd947cd90fc23097007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016623137748000004030046304402206e3ca2d1b1269548eb381267335010e01d01e21c052efbc0544875f94a0a805d022017907b4ec76d8a610a6dc065e9c20bc6b8ff0fa9abdd836e4b0ee120a6bd9fa7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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