www.benchmarknorth.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:09:19:06:a7:c1:45:f9:78:b5:21:d0:39:22:ce:3f:95:70 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.benchmarknorth.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:09:19:06:a7:c1:45:f9:78:b5:21:d0:39:22:ce:3f:95:70
Serial Number (int): 264432664353720055450144446273039257015664
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 87:dd:c5:9f:d0:62:ff:a2:67:9f:24:01:a0:c1:0b:bd:51:7f:24:01
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 22:e1:05:45:fd:de:96:48:29:c0:d8:18:ff:67:72:80:df:6c:2c:af
Fingerprint (sha256): ab:a1:50:ed:b3:b6:8b:b3:8b:cd:a8:e9:a4:fb:e7:b6:f0:6a:24:43:f2:62:3e:5a:0c:c6:c7:65:b6:cb:eb:e2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.benchmarknorth.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.benchmarknorth.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

benchmarknorth.co.uk
www.benchmarknorth.co.uk

Other certificates including the domain name benchmarknorth.co.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.benchmarknorth.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264432664353720055450144446273039257015664
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 20:32:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-28 20:32:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.benchmarknorth.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815065431777354201632607325096682373953139101220166710600947452089926636223168649006005186067048099694317701838115190425771612874763548036436388180632017976595796796121081414447976889368020015613437944257820770469048739216656537639656002346485572938088453973458202938672210559206934897194683995727073892623829151748635624762380705528471344733988926051862775178446006204686934221397071429273442548520373071553703723726907534425644120112725365707303779845703799839803685462313966734825851816359255777748207149348711115570382595652188483341869341852303085067084376886895700471558955798971359625319378583006230171153111356002140009749482741195819313315621374337763620076130759090361099670732086825550262991403275579431351076172909343965399216755390404340264282395969544928554603036001665015295216531379589969997379384201739826180223674053443987003083568798179281785514625288946285523162769420391644892111261188124390525391843344853927232520750359298728820832745787336564739141398450859692564722725355184592916483250073997761903848414935848856193357642330622649772461582352521845903216694034677369162992936209973731461193330623533343727750921390235643864243097495486261647094622384176789793633951578102159331321119131409770113744449955553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87ddc59fd062ffa2679f2401a0c10bbd517f2401
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benchmarknorth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benchmarknorth.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001890e392d1d00000403004730450220546e1cdce3bbc1d7347e21d71e13f3e98073bb37a34306b635a11664b65fb7ea022100f19353b95fc575436a68080f311e981af8684d2d07558d134a5909909743c49e007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001890e392d5000000403004730450220731cf5366578235a499b91a7f70ad226d9f23d2cb245d680068cd50c2bc04ac10221008860041310205aaa3502147ea8ed6084f2935f587294ef05cf3014e9f2db5068
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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