dssb1.clf-vps-001.clf.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d0:87:ba:c1:d0:22:0d:6a:c2:f9:19:ed:70:a9:95:3e:b4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dssb1.clf-vps-001.clf.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d0:87:ba:c1:d0:22:0d:6a:c2:f9:19:ed:70:a9:95:3e:b4
Serial Number (int): 332296005592477641479310957415993454182068
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a8:77:f7:04:7d:87:72:3a:3d:75:57:de:ae:73:0b:6f:70:a7:10:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 81:a7:24:77:b3:ce:5c:a6:c9:10:0e:7d:c6:21:0a:4e:ad:fc:41:1c
Fingerprint (sha256): c4:f3:5d:8a:49:a5:eb:a1:5f:31:0e:57:4f:af:2c:7c:92:4c:46:25:46:5b:3f:fd:49:6e:37:e6:e6:8b:b1:6c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dssb1.clf-vps-001.clf.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dssb1.clf-vps-001.clf.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dssb1.clf-vps-001.clf.uk

Other certificates including the domain name clf.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for dssb1.clf-vps-001.clf.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP4Tph5ZvilwLKNY6c4K
ooAYvaggd0mdz5v2aynEGz/mAuEDAbLB+GiC8CfGV9b8Dz0QacMOiIFcT4plDkDG
9HLzqEFmVUv9CVK4poWNF/1UFlENU5lRnFNNDOhQPpHLZZAeEI/L3a5gDLFM3f09
yvvsX7kJzoYmrTIkF+TMTNNaO/lUTFB/wfh3jQzBY/CJOB4kWgpoTdKDtd3A8X7p
grT7tbeN7lXHjvJ7yteRKZICLePOoEG+FCoq/mD1ILM0Td34ToaAXGpkIRNL38Zw
iBOtH4yE46/kpImLfKljHO6ek5ljCvAeLh7Oz5ZBFgwmqizWoT87aziPvtgBWEm8
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332296005592477641479310957415993454182068
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 08:00:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 08:00:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dssb1.clf-vps-001.clf.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22848184810669433803429482920237401215988368053874161154515901693581680311440784281341531563769833552104739829126974854976320710533339359089860861663800374297213937194464843338212998703860218077930605200459947183006683284888057408028784287125388479991378264801085316111361285989469826028870740138664712907132657325701966675461663370752324242681089990168662989128585106531736302914216342623705065491801345074300550798782874221268994732004703276950713935038993866699948430788943469507247209874086653839755091608686511906294528616993242396614338767465985202355612442233752495569643708858885896474650513282691432993897509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a877f7047d87723a3d7557deae730b6f70a7109e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dssb1.clf-vps-001.clf.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dd8f277ee000004030048304602210091485f5428557aefe5f09e749252ff7cda3ddd4de786bd0f5069d113e8898181022100c36afc169956b3f2a82c2294656ef5c2ed9fca466f0d21088db00b426d0de3f60077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dd8f279f300000403004830460221009de8e7e58367fcbbc78e50096f4608c9f99cf98efeb3d50ee7cf5c4bf956701d0221008b0886cb57b40025c108de6f94b072b93164a17b3fdf4900d6013ba7385313f8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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