fia.libf.ac.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:aa:4c:e5:80:ab:01:82:96:f3:b5:de:cf:58:79:63:e7:42 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fia.libf.ac.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:aa:4c:e5:80:ab:01:82:96:f3:b5:de:cf:58:79:63:e7:42
Serial Number (int): 319287073145197449226083028212147695118146
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 15:be:11:5c:60:ed:4f:ba:08:68:38:aa:d8:c2:5e:c8:65:9e:28:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d7:7f:e1:db:a6:7b:d9:7e:34:94:8f:a3:81:2d:30:3d:c4:7d:85:fb
Fingerprint (sha256): c6:93:fd:09:47:59:af:d6:db:14:69:9a:a2:fc:77:b3:01:dc:07:0f:45:da:9a:db:4f:fa:b8:43:fa:1d:24:15

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fia.libf.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fia.libf.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fia.libf.ac.uk

Other certificates including the domain name libf.ac.uk

(limited to 100 certificates)
jira.libf.ac.uk
lf-droner.dk
etest.libf.ac.uk
learn.libf.ac.uk
brightspace.libf.ac.uk
static.jexport.ci
fia.libf.ac.uk
libf.ac.uk
brightspace.libf.ac.uk
townhero.ru
*.libf.ac.uk
app-dev.nuna.ai
actioniq.ideacloud.com
brightspace.libf.ac.uk
canmail.libf.ac.uk
fia.libf.ac.uk
authlink.trouve.noren.io
libf.ac.uk
fia.libf.ac.uk
admin.coastlinesolutions.com
learn.libf.ac.uk
www.thecouponcalculator.com
fia.libf.ac.uk
fia.libf.ac.uk
*.libf.ac.uk
*.iu.org
*.libf.ac.uk
*.libf.ac.uk
onlinedegree.libf.ac.uk
learn.libf.ac.uk
oasis.libf.ac.uk
learn.libf.ac.uk
lonmail.libf.ac.uk
fia.libf.ac.uk
app.upbycellance.com
careanalytics.co.uk

Certificate

The complete raw certificate details for fia.libf.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgISA6pM5YCrAYKW87Xez1h5Y+dCMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDQxNzE5MDJaFw0y
MDAxMDIxNzE5MDJaMBkxFzAVBgNVBAMTDmZpYS5saWJmLmFjLnVrMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwvYJfpE0Lvoiq1X0ityyc/gB2GLn6ilz
6fdcgbRPjPx7VRWi/0N2IB/eM3dJpshppfx24cS6lsrjwMlBVHiIW6fQM5C4F+7k
DKfDzs5uDFgLm0OmfxbaTmQ+YnZrBuVsaP7gKYWsY9qGTX+a8z1xzuTbtkaeUiRR
ATPXGLgiH+jkL4AxKKIVRVr0QAHl/qcQ7ADnQWFbVFw0C+rzT7QqMQJAr7Atb1BM
9rpOvSPKwaGY2JifMEdVCh+NiJt8VjqoOzT1CWVMYNlqfrg5o/jfCJoLMiQQ321b
cHLjxGpdL/6wPVMc1EO1Hr+1YG9esGiTfYZl+s/SbAl8kl+z99YYpLrA+/xUI/si
SiF9fN/3vl1bhSylTB/OH6+d1IrCtZYXqbMDG6FjfTdQIcPeoYYUgj9v57MGByaj
kOfZzroj1CkA93gXYRh93cknLFPzPKSKoJlRAtw5ou2FhezdxBipEO8oPPnbph2G
md1g5Tk2IQqu3u2pYuQQkujvcgq4uNhpu7e+rTH8mVO3FxhImifhY432GcKOYiZK
eECizvtPaa55jKrcrgiCSKVXN7gRZz/ephjn2UG1icCu0PJvikLJpDH9a5nW6McG
aKGDqyO6ilVA8gCbyAurdYrrqFMkXyR9wF+kAn1/2t49uDTHZ26m5yriSGpuC83m
+IpNamRvB5UCAwEAAaOCAmMwggJfMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUFb4R
XGDtT7oIaDiq2MJeyGWeKAYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5maWEubGliZi5hYy51azBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUE
gfIA8AB2AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbZf/ICAA
AAQDAEcwRQIgJANteFtGmvm/zMfGrO0SQys/hCGR+RpnsL/qHK2hgZYCIQChWOW+
Z/XrI0iy6QXG71udGIDyMm9UymF04x1pjuvZngB2ALIeBcyLos2KIE6HZvkruYol
IGdr2vpw57JJUy3vi5BeAAABbZf/IA4AAAQDAEcwRQIgbAUkNBAgytbuEG00HJTf
vJrRc53mMw+KURzYZuRhgnoCIQDxRnzoMOkAWYaf2roELfF6TpMlJ1+jl8H41m/8
nvQxPjANBgkqhkiG9w0BAQsFAAOCAQEAU3u8fqbr3j71aJ60zrsqMk1EPO94p0Pr
bv42HVMQeOnHJ5Nvo0c0EXGT79vbEhqDkGieJpJFqhh96NzOLqso0jEtA5IMSx5/
dV2hullvpLyWzfS7602gtSgoPYpFFQTPtaK54tyuTWX8Y0vUR+273gZkRRSKpmYz
EKQ2hh9hGG/iSt39wyvaG3gxKN71onJlP6NM93i1mIESV/5Ti1JUPe//eaxj2mib
oS0GywIxPcuyuoTMUUse5NPLU2MYjs9l5+7LkJLvbk954vdddPSkHFNzfTsaBkru
aaw/C0y3ZgEs9xW23IGdyl00nwzWusvM2j9RmiKg7PsS1jV18JRliQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319287073145197449226083028212147695118146
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-04 17:19:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-02 17:19:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fia.libf.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 795371823198179166567362400518632039075308190894557082238855184959591574054864725689579481363428928551798115847638640258549856135221158355564853375478837783400059039647999756331253347657637032500095476987416649568591595608726664954977136167056215880648326608040265482859015742182941627971529033672499900244871339347244560077884620927272601310004051175648095742187617619800345279391725552940668799583754232365091416745455766939890555423120022186520363990047451361633485424405052784258053822472851592192471068419013206378333109573357372714924091566704513818411688976887707421538584000048764561203247694595050084851422936608804372916002590007240827984557449978921802469715187088466523372293093949143612931656457613662887694660755892376674392055268672369889184143874348900685139215279706587055713811417993715036553701292943527666520286768541811146574278973455513223107812520651344345959569357788967124916080450083846611544129636101557489959964127817455694288587122406598691691304772569105152475164303708699577322984144425934812948785744120522569439771326712057272258767227612417366299163170520514362844335472657177041849599483692287175203699169935027903734212247578499977658316932481807755477359725623504043226128243387953459048511113109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15be115c60ed4fba086838aad8c25ec8659e2806
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fia.libf.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016d97ff20200000040300473045022024036d785b469af9bfccc7c6aced12432b3f842191f91a67b0bfea1cada18196022100a158e5be67f5eb2348b2e905c6ef5b9d1880f2326f54ca6174e31d698eebd99e007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016d97ff200e000004030047304502206c0524341020cad6ee106d341c94dfbc9ad1739de6330f8a511cd866e461827a022100f1467ce830e90059869fdaba042df17a4e9325275fa397c1f8d66ffc9ef4313e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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