www.oscotech.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bd:2b:f7:a2:62:b7:b0:8e:74:d4:94:04:af:db:42:0b:b2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.oscotech.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bd:2b:f7:a2:62:b7:b0:8e:74:d4:94:04:af:db:42:0b:b2
Serial Number (int): 325708667738052483937849862887746815790002
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:7e:cb:81:2e:09:bc:b6:f7:d9:86:3f:57:c2:21:63:ca:af:76:bf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5a:99:44:04:2e:58:d1:a9:2c:e3:35:55:89:dc:f3:77:b9:c3:9d:a1
Fingerprint (sha256): a6:81:68:09:0e:c8:df:89:e1:14:34:92:9a:54:7f:65:c0:d6:d7:eb:af:6e:bb:55:37:1d:56:8c:79:4a:0a:e8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.oscotech.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.oscotech.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.oscotech.co.uk

Other certificates including the domain name oscotech.co.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.oscotech.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325708667738052483937849862887746815790002
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-11 07:15:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-10 07:15:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.oscotech.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 576349773296329650948112453470092824718668604553415527856803981217761213419269770368934507166662498901771563949148111201489441926048071316821849272189485104034973401429904797073837879596164698630031539762692366190870965270933561271586341818626210694099229922379937872017949639794903716467849186036401085203865814400583824753278300045820216935037527303427363020710590492213702226065132952630011541843280431895841119008710856698887050362609430134891321205110325662027521447824731070156659721972141544423609205043876599403251873829819167524305289311387514714985116176333268778997966440934230986778623903053846992388139311150305815499564517663762738293483937033420683314399260321967001575592601244951294380346339529612949843707045925575083191972545552510217587577407503466995737019664688416175560406801472309232838403361641614058551846863565753348543581377006819507285351756696140950412370016784984715023881085271554657791756512121428319798973305839146225726586827409170659243341961032067389359466938728521882033957666775552422717922272116545488807671256667361058765001505709854667922728074265601044483917023578673235509731251311707066340417154084294778623370181527103837666351293645477644991951518426786634521521736125523283592212748629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e7ecb812e09bcb6f7d9863f57c22163caaf76bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oscotech.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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