www.oscotech.co.uk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:bd:2b:f7:a2:62:b7:b0:8e:74:d4:94:04:af:db:42:0b:b2 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.oscotech.co.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:bd:2b:f7:a2:62:b7:b0:8e:74:d4:94:04:af:db:42:0b:b2Serial Number (int): 325708667738052483937849862887746815790002
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1e:7e:cb:81:2e:09:bc:b6:f7:d9:86:3f:57:c2:21:63:ca:af:76:bf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 5a:99:44:04:2e:58:d1:a9:2c:e3:35:55:89:dc:f3:77:b9:c3:9d:a1
Fingerprint (sha256): a6:81:68:09:0e:c8:df:89:e1:14:34:92:9a:54:7f:65:c0:d6:d7:eb:af:6e:bb:55:37:1d:56:8c:79:4a:0a:e8
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate www.oscotech.co.uk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.oscotech.co.uk
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.oscotech.co.uk
Other certificates including the domain name oscotech.co.uk
(limited to 100 certificates)
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
www.oscotech.co.uk
Certificate
The complete raw certificate details for www.oscotech.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgISA70r96Jit7COdNSUBK/bQguyMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA0MTEwNzE1MDBaFw0x NzA3MTAwNzE1MDBaMB0xGzAZBgNVBAMTEnd3dy5vc2NvdGVjaC5jby51azCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAI1GRzJgzPAYS5Loy9j4t3gMYybo xMfnkLIUAtVus0+Vqm6GcmWzpbn4Q8LFBua5FXNOmxPaQsjmnUzTsA2LN9n3jK3r JitB9igz5Bw+PoHkUHU7rKpTVrlG7OvPVMKrtjSgvsrtm2ay1XoNS6GMmKegFr3r 60lew4r7//yBW2KLIH6AsffT/vfYHkrcCFBqtr7/cYr+faooeNWeJ+35a0lEjOF4 SYnZ7qltyGCph1ANJJfMx5Xkbz2hpgLWk71aVoNiJR+B/QqTWsDxQnSbMhZLoYMG E78suWdvFMWdyH5qIGsURK5Go0N/At5ZR/dn5Az3hUVp4svRh7kHMF8PM84waTSo iLsghNG8JrNH8cE4lJMoAcVG2+DoNtN9PNrPYRhlYojaUR3HYlj86zcMGoegdBr+ Io9n4iLwdMH3FezwNo8qudx+cYpAcIQRqO6ZmT9XSLfo1o4yazftlTNwCUkkr9xC StJacOUpGGVbbjQJOilFmUwc9Yl9Gi1ip3QqO2/SeWesOLJIWVBsB498h6imclEn kFeava8+Ad9VG3GVhbGoBtoKn57cxPWKboH7iC+G4t2iAhPkFwZ3zqEI7QmCXNMv N03VGIYiOjIkvmMDfFPww/Fgm7Xu6BPlaO83JcFNe6UHp0EX7v2H9BFa3iVOmjdt U67MxkKpvEevdZlVAgMBAAGjggITMIICDzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FB5+y4EuCby299mGP1fCIWPKr3a/MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB0GA1UdEQQWMBSCEnd3dy5vc2NvdGVj aC5jby51azCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEw gdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggr BgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVk IHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ug d2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0 c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQBybhLC is+WMzOpJ/et1JjQdj0lRJHE0SvjegaSbDhMmqve9nDrFx3IVmzXoE8nokIj5mm5 SVLLM+vkt09NJzd5qitYJQWOfIKMMf8ZDnmlG5N5/7+IOv9VyiRyprAOtWN77Drc GO2j/jOXqAArhqHjjJHIizLJr4QLpULSFYy3yi5F/PumHCaoZ+z6yp0N7kZqn2WU GRrvZAK5Vmw91eUW1ONeUCfheBxpQOrK/KoF1iMY4lAcnuU6UujmlNLmblPJcVFS gDWbJtd8qZuRq5oe+8TZtjJMKLS8upLaE6L1ye8Hpfomh50zJ3f5CqAgPQb2BhJ5 Uqi/kfpCANazipB4 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAjUZHMmDM8BhLkujL2Pi3 eAxjJujEx+eQshQC1W6zT5WqboZyZbOlufhDwsUG5rkVc06bE9pCyOadTNOwDYs3 2feMresmK0H2KDPkHD4+geRQdTusqlNWuUbs689Uwqu2NKC+yu2bZrLVeg1LoYyY p6AWvevrSV7Divv//IFbYosgfoCx99P+99geStwIUGq2vv9xiv59qih41Z4n7flr SUSM4XhJidnuqW3IYKmHUA0kl8zHleRvPaGmAtaTvVpWg2IlH4H9CpNawPFCdJsy FkuhgwYTvyy5Z28UxZ3IfmogaxRErkajQ38C3llH92fkDPeFRWniy9GHuQcwXw8z zjBpNKiIuyCE0bwms0fxwTiUkygBxUbb4Og203082s9hGGViiNpRHcdiWPzrNwwa h6B0Gv4ij2fiIvB0wfcV7PA2jyq53H5xikBwhBGo7pmZP1dIt+jWjjJrN+2VM3AJ SSSv3EJK0lpw5SkYZVtuNAk6KUWZTBz1iX0aLWKndCo7b9J5Z6w4skhZUGwHj3yH qKZyUSeQV5q9rz4B31UbcZWFsagG2gqfntzE9YpugfuIL4bi3aICE+QXBnfOoQjt CYJc0y83TdUYhiI6MiS+YwN8U/DD8WCbte7oE+Vo7zclwU17pQenQRfu/Yf0EVre JU6aN21TrszGQqm8R691mVUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 325708667738052483937849862887746815790002 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-11 07:15:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-10 07:15:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.oscotech.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 576349773296329650948112453470092824718668604553415527856803981217761213419269770368934507166662498901771563949148111201489441926048071316821849272189485104034973401429904797073837879596164698630031539762692366190870965270933561271586341818626210694099229922379937872017949639794903716467849186036401085203865814400583824753278300045820216935037527303427363020710590492213702226065132952630011541843280431895841119008710856698887050362609430134891321205110325662027521447824731070156659721972141544423609205043876599403251873829819167524305289311387514714985116176333268778997966440934230986778623903053846992388139311150305815499564517663762738293483937033420683314399260321967001575592601244951294380346339529612949843707045925575083191972545552510217587577407503466995737019664688416175560406801472309232838403361641614058551846863565753348543581377006819507285351756696140950412370016784984715023881085271554657791756512121428319798973305839146225726586827409170659243341961032067389359466938728521882033957666775552422717922272116545488807671256667361058765001505709854667922728074265601044483917023578673235509731251311707066340417154084294778623370181527103837666351293645477644991951518426786634521521736125523283592212748629 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1e7ecb812e09bcb6f7d9863f57c22163caaf76bf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oscotech.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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