stgroup.co.uk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ec:70:fd:3c:2f:00:5c:ae:60:f9:e2:74:47:7b:4b:2f:be was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=stgroup.co.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ec:70:fd:3c:2f:00:5c:ae:60:f9:e2:74:47:7b:4b:2f:beSerial Number (int): 341793684795923749108310065849938616201150
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 5c:39:0c:7e:81:a5:8c:6a:27:99:c1:82:24:fc:aa:b0:f6:a6:3e:92
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 02:c8:c2:d0:e1:fb:4e:4d:45:9b:e4:d8:ea:26:18:b7:b9:c1:e2:1c
Fingerprint (sha256): a1:b7:28:a8:74:7b:f6:d6:b3:01:3d:6d:47:ab:de:f9:a2:6b:70:29:5b:ac:f3:0e:d0:df:99:c5:ce:f7:cc:9c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate stgroup.co.uk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for stgroup.co.uk
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
stgroup.co.uk
Other certificates including the domain name stgroup.co.uk
(limited to 100 certificates)
Certificate
The complete raw certificate details for stgroup.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISA+xw/TwvAFyuYPnidEd7Sy++MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MDgyMTAzNTBaFw0x OTA4MDYyMTAzNTBaMBgxFjAUBgNVBAMTDXN0Z3JvdXAuY28udWswggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDhesR4UVXZu1CO0TJo2Q9Mf67tlmbNdVYa 649beWt2Puu5UCFckyyPyIIavyPb/HZlgDyEI3HTARZlEtANmgbx+w5xLaz1+En+ lD5YRGNWcEfSBVpxYr8JSB/w8/5Va42AH2AnhNZ2kFeSNHIYiGul3M8xnJiTVngD Mx6yYUTyLudrAtB5/K0LoKI9LLRwnyPsUjBentovXId5ARyFbdbnp563fDlj8aVP vMnJoUZ02PJEgpmhgKw83ZNkdHLm9W1Alg+J9xy9+kC/aFwr9XcKkHOwl27EHt13 /msrGXCffuA+cYrnu5GE993qBpMlwHz2CioS55iskMSStfy6EFsfeigFZ3HLyX73 Gwwae3zU4XrPVbWFWaLKPfr/4C+0kFtuVY/OyrPK9/bPUUT/IBbAeAec0+rXL4nM 9CnHDoOKTCGELMBKS/Khw80x+uWBf0N6tQ1SV8KWG0FVK7h5x1XCfbMbDw/7//Kx 77VhYrPHLTX41B4jvX5mnvuM6b9iQPs7qpkh+az/NYvR9I1NBr2yJDK9/RB/mqWy yh3OfABo+N48q3dS9WbOM+JvS2wOrDo2nu1cDlTSxUFr3N+vsnEaHt09e/Hjsd9a XgX4hzpULebObIp24gxeuNOif7thxkLIXPD1FherYfDTOmg39HsFZED/tjVzyRjv auJZTDY3HQIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRcOQx+ gaWMaieZwYIk/Kqw9qY+kjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXN0Z3JvdXAuY28udWswTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx AO8AdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWqZeWRiAAAE AwBHMEUCIBXH3Uk2OYfdQAf+Rv+V/WUWXA7t89rUhvb3BwLKp2j8AiEAveZK3ugl n3eer5em2ZlVFVGG0vfIjlS96Xdz4tigE4MAdQApPFGWVMg5ZbqqUPxYB9S3b79Y eily3KTDDPTlRUf0eAAAAWqZeWRbAAAEAwBGMEQCIHs0D6+zEchglm4fapD5+f3T hUpq+Zuo3QHfjsA9sjjOAiAGqdU2uBH8j1i5hmhcZTj9zP5HKK9boXhxkM2wmJrd 3DANBgkqhkiG9w0BAQsFAAOCAQEAcO/yw3iUf3GRhnp7ZVOU0Ae35Bu8HhkM4SNa 52MTQRSUkiomPJXmT78qo5hpMb+3bb1fUj2f3B1kYDK9wFMQNtlLqhc9t1qJCFmu N1aBx2gfu+s5OyWeWKfBUWD6g55NlHZaaO7ireYHaP2FfGRF75cT5Tv164ZGFhRJ V9q0z+FhB13vsG3+nofm2y9Fp6zt7t/VXA96LxRoHB2kKkIFO7c+WosLtc4rorBC rxeefuudW0alnkB8rQz14oCTaegFBwx1WaicdcJN6eX0asQgHZfx2i19DqExLEAT gYDDwnaxtikX5cBGlV6WKbueSAHIAI5POCAK0+IRvj+Y7RZwBg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4XrEeFFV2btQjtEyaNkP TH+u7ZZmzXVWGuuPW3lrdj7ruVAhXJMsj8iCGr8j2/x2ZYA8hCNx0wEWZRLQDZoG 8fsOcS2s9fhJ/pQ+WERjVnBH0gVacWK/CUgf8PP+VWuNgB9gJ4TWdpBXkjRyGIhr pdzPMZyYk1Z4AzMesmFE8i7nawLQefytC6CiPSy0cJ8j7FIwXp7aL1yHeQEchW3W 56eet3w5Y/GlT7zJyaFGdNjyRIKZoYCsPN2TZHRy5vVtQJYPifccvfpAv2hcK/V3 CpBzsJduxB7dd/5rKxlwn37gPnGK57uRhPfd6gaTJcB89goqEueYrJDEkrX8uhBb H3ooBWdxy8l+9xsMGnt81OF6z1W1hVmiyj36/+AvtJBbblWPzsqzyvf2z1FE/yAW wHgHnNPq1y+JzPQpxw6DikwhhCzASkvyocPNMfrlgX9DerUNUlfClhtBVSu4ecdV wn2zGw8P+//yse+1YWKzxy01+NQeI71+Zp77jOm/YkD7O6qZIfms/zWL0fSNTQa9 siQyvf0Qf5qlssodznwAaPjePKt3UvVmzjPib0tsDqw6Np7tXA5U0sVBa9zfr7Jx Gh7dPXvx47HfWl4F+Ic6VC3mzmyKduIMXrjTon+7YcZCyFzw9RYXq2Hw0zpoN/R7 BWRA/7Y1c8kY72riWUw2Nx0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 341793684795923749108310065849938616201150 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-08 21:03:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-06 21:03:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stgroup.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 919876351021784033433143016775032050068900979258867701351464089112943395570331889254615653535072635165694102807938733570965598351869521212975904510933622627658036433184859350045279718496154607468585312327765613322137934345377043200548439916558780225148486072649766869834632306390691556227337791383308299268759985342967957178258396499643386278062597259122928895235414686094092536640553046015515448682435852605798422979648003299633178717990578720430326229847089667796553278983555675934468162660986370514473844550312762667185364573278265746399952695129001470649593854298575596608096139037300596385612157222812252343993048874851003614854203052918255797631845333510529439234494016123827567976425036507356892366864595739389120147590998236206750799228616676563238575608274634364424583926716265257357998951585112519324657591522289929104845210633992173894117258297693680843600174737099759570522942434534730070237075514942936439814321843329522289419919082302162936431502675073386960788611335176382582075660759774878209665582371199794823351878515675188823744427503183348319150746073597492086080387741123294974592446624092557157092607444720490752457434067994692548766083470050763018557998976422332816257468275387498535200745605651605795213031197 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5c390c7e81a58c6a2799c18224fcaab0f6a63e92 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgroup.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a997964620000040300473045022015c7dd49363987dd4007fe46ff95fd65165c0eedf3dad486f6f70702caa768fc022100bde64adee8259f779eaf97a6d99955155186d2f7c88e54bde97773e2d8a01383007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a9979645b000004030046304402207b340fafb311c860966e1f6a90f9f9fdd3854a6af99ba8dd01df8ec03db238ce022006a9d536b811fc8f58b986685c6538fdccfe4728af5ba1787190cdb0989adddc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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