midlandsailingclub.org.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:2a:2b:a9:ec:ad:99:fb:d3:ac:8b:48:05:c3:ea:49:4e:50 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=midlandsailingclub.org.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2a:2b:a9:ec:ad:99:fb:d3:ac:8b:48:05:c3:ea:49:4e:50
Serial Number (int): 275686756308350793396985061044157879504464
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7c:53:c9:ec:59:e0:cc:49:64:e4:de:ab:3b:43:28:4c:87:28:2d:f1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 03:fa:a7:96:a9:6b:8f:e7:70:9e:7f:9d:cc:d0:a1:25:23:3b:3c:c0
Fingerprint (sha256): a8:d9:ec:a9:3c:fe:c5:81:d8:4f:c5:2c:5e:88:2d:1a:2d:54:c2:d5:e1:5b:e0:b1:3f:63:ee:40:82:a1:c5:46

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate midlandsailingclub.org.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for midlandsailingclub.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

midlandsailingclub.org.uk

Other certificates including the domain name midlandsailingclub.org.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for midlandsailingclub.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7+OmiYa8B37WXOa4f93
SN1DvufnlAWcjmjrX7m0+BOc5glZ109l2BuiDKnRO4c7fiUyQKn9gz95noWIf3QA
GT7Ej1U7FRnuhQiOXn4Vxu+mwMz6euNJjp4PQYgbeolfYC/K3HHPBCTZU6zvyKx3
v4rX3+bmnxz9s6/Cq8bOQ5DVEkrDDIUR+aKbef37jl7hwKTAUNjAJLncy0U6eunv
lMpXIlOnvEAvMgzsjWcoA2wT0/jms3YQ0PanqU4aGWTf2EwSvxxWJg4JC381epAf
Hg11ZTSxirgPQkgmI4Pep4psjh2gu99gl/XSOnLhlermNBfC9UOseEV2nzNlhFJr
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275686756308350793396985061044157879504464
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-30 16:25:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-29 16:25:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'midlandsailingclub.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19661397566561533120494956122507816162001873268362916113527107336857907305047909904333380389935327326800925202196470972200381376528639450096161419679501547505006388948313581512616897931346132913483786950469493736101532023666360823291162260125850827700274931075154796041811329220525222471891155663954547376114420746070140609395026331628652699057928660005967805883494638026531110226735278105853828214183777600615980961578942923886726027093402064529231210732991904552122205448464088267139614946607859754236273962360381883841385746849620390147443937545511477273320828301755493165721398742086024187434501579992399344724899
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c53c9ec59e0cc4964e4deab3b43284c87282df1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midlandsailingclub.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ae71fc2f400000403004730450221008c537f19d6b60f3b088044a19357316cb611bf014b6d402640efda2034be058b022058493cf0ee2d8f1b99f01afd9a94737ca77110b76a88c6959b95a691461dc7340076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ae71fc307000004030047304502203af4671a242b69832a523c81f99029f5ad682cf4745f3b7a90fdf89bbea9881e022100a8339962b81a57b0d72026993ebb222c84a88804e23cc762fb94c785a37b18a8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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