fornjot.malc.org.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:71:8c:f6:48:4a:53:c3:d8:18:e5:9b:02:4c:97:e4:aa:ca was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fornjot.malc.org.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:71:8c:f6:48:4a:53:c3:d8:18:e5:9b:02:4c:97:e4:aa:ca
Serial Number (int): 387088421879766420253476335117770722421450
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e1:1e:fa:03:bb:c8:34:c3:54:54:ce:10:bd:f8:f7:76:ea:fa:16:8c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ba:36:2c:d4:47:6e:72:ed:6a:2d:4e:f9:70:0f:c3:c0:5f:68:ac:5a
Fingerprint (sha256): 9e:3c:53:0a:90:b2:7b:04:bd:c6:f4:66:fc:a6:77:9b:89:35:3b:fe:36:4b:7f:33:60:c8:7b:a6:13:76:a1:9d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fornjot.malc.org.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fornjot.malc.org.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fornjot.cl.cam.ac.uk
fornjot.malc.org.uk

Other certificates including the domain name malc.org.uk

(limited to 100 certificates)
munin.malc.org.uk
hats-cdn.malc.org.uk
manatee-gw.malc.org.uk
munin.malc.org.uk
webserver.srcf.net
webserver.srcf.net
rig.cl.cam.ac.uk
webchat.malc.org.uk
rig.cl.cam.ac.uk
rig.cl.cam.ac.uk
manatee-gw.malc.org.uk
mundilfari.malc.org.uk
webserver.srcf.net
wadjet.malc.org.uk
callisto.malc.org.uk
blog.malc.org.uk
malc.org.uk
callisto.malc.org.uk
hats-cdn.malc.org.uk
fornjot.malc.org.uk
webchat.malc.org.uk
io.malc.org.uk
manatee-gw.malc.org.uk
webchat.malc.org.uk
webchat.malc.org.uk
callisto.malc.org.uk
hats-cdn.malc.org.uk
rig.cl.cam.ac.uk
webserver.srcf.net
callisto.malc.org.uk
ananke.malc.org.uk
manatee-gw.malc.org.uk
callisto-20140409.malc.org.uk
webchat.malc.org.uk
callisto.malc.org.uk
malc.org.uk
callisto.malc.org.uk
mundilfari.malc.org.uk
callisto.malc.org.uk
malc.org.uk
manatee-gw.malc.org.uk
manatee-gw.malc.org.uk
webserver.srcf.net
webserver.srcf.net
io.malc.org.uk
munin.malc.org.uk
manatee-gw.malc.org.uk
io.malc.org.uk
blog.malc.org.uk
mundilfari.malc.org.uk
webchat.malc.org.uk
manatee-gw.malc.org.uk
malc.org.uk
webchat.malc.org.uk
rig.cl.cam.ac.uk
ananke.malc.org.uk
malc.org.uk
webchat.malc.org.uk
callisto.malc.org.uk
callisto.malc.org.uk
webchat.malc.org.uk
munin.malc.org.uk
io.malc.org.uk
webchat.malc.org.uk
blog.malc.org.uk
rig.cl.cam.ac.uk
io.malc.org.uk
manatee-gw.malc.org.uk
callisto.malc.org.uk
webserver.srcf.net
malc.org.uk
webserver.srcf.net
webserver.srcf.net
munin.malc.org.uk
webchat.malc.org.uk
webchat.malc.org.uk
callisto.malc.org.uk
manatee-gw.malc.org.uk
hats-cdn.malc.org.uk
webchat.malc.org.uk
malc.org.uk
callisto.malc.org.uk
ananke.malc.org.uk
malc.org.uk
munin.malc.org.uk
fornjot.malc.org.uk
manatee-gw.malc.org.uk
io.malc.org.uk
rig.cl.cam.ac.uk
fornjot.malc.org.uk
manatee-gw.malc.org.uk
webserver.srcf.net
blog.malc.org.uk
webserver.srcf.net
wadjet.malc.org.uk
callisto.malc.org.uk
munin.malc.org.uk
mundilfari.malc.org.uk
callisto.malc.org.uk
io.malc.org.uk

Certificate

The complete raw certificate details for fornjot.malc.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387088421879766420253476335117770722421450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-09 10:43:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-07 10:43:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fornjot.malc.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731208676276277210286467506776347322447049970819433480284353566885508219260131376637700473740187009832503149019758846576104344039864052715549268070756303374845287499965874555649557284231110515763353628658697450573019472046160418676192489837672987454269778346523623192928518871413422128414391202622047863735510114407467394759381526589565199571533037076122589961617468385231709521486296797836007345711086150519481877442155753669952507993924629395372243945908916750341283062825728940569382899463221346454702526787618418740125612309417028668919124562663934249711282776865393249708096355967861857640885140745348241964869380511035391697682700886183194143184911054437450692735298939678580197835214542823838949744734727391253798253593060769869393721664359692220631375422969112122479945196639762316819711308995258448980208922098753601553904828505074849225311373239984744999710953986953802613529385385031187400868459232860441184768723081903572109824640492718887533175332199478469915489921244141704324990873842107251833117452284918205553894877624877926371684105509284560234137559438436040023128193493330704438221339415630883249008040769075740574272009180455896099190083230424313493382362095246339810740861186275581544029004714158291329605726431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e11efa03bbc834c35454ce10bdf8f776eafa168c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fornjot.cl.cam.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fornjot.malc.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a9c680ce2000004030046304402204fa7635e7f1aa67c5b5d776836c2454b1fbedac734ca57288e5519d579d0421c0220668d88fc792d644f008716bb4f9044828ac84aa5b78d6d976231415f3e638c5400760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a9c680ced000004030047304502203fffd37c7551e4841e56e08bee31586d92ff565b9348d549783bc9848db12c6b022100a6766edd3f59ca31a6572006f414f5c433014f3eed2a7e29e20153cceeb129e0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004d66b0a429cc4e9c5cae7f31960f81af4c700d27e9ae78f9525773dba58a707911a276c3d3e22b52eb6e36ef2f34786fe8fb4353f21a9ce3a286ff766fd94075bbdb202108ce4c4fb20ab004340053564c0e874ca5d8d1a0b1a4cddf7daf884123709043e03b165e63a56fdea8d46f7d1216c9512a2dbc0e3c4e4613812332b29a84be274851d609dcc4ddd1c13661c7507327cff80b4d47003b258cf5c92e50a78873c22318759987e2e68c213fb8d5f0f33332562e701314f3b5f36c25e12f050508dc35d54853dc42c5dc9e99730f4d00e5c8680d6261aeb742c739b3cc6fb67ca98be759f19afdd5344c2035ca7233f76c7f8e06c783fb6d1e016fa354e2