fia.libf.ac.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5d:42:2e:3f:60:84:1a:aa:c4:cf:80:2f:1c:35:44:0d:f6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fia.libf.ac.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5d:42:2e:3f:60:84:1a:aa:c4:cf:80:2f:1c:35:44:0d:f6
Serial Number (int): 293071087097743906982873257243497168375286
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 79:e5:5a:89:32:2b:ce:45:00:d1:b1:b9:38:de:b8:b6:d9:c0:47:5e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 39:88:f6:2d:71:ff:24:5a:8c:e5:2d:f5:46:29:36:55:a1:ea:ec:d6
Fingerprint (sha256): c7:b5:75:bf:b8:3f:c5:d5:5c:b3:2c:a0:00:00:53:92:ed:b6:fa:c4:22:c8:61:b5:bd:8b:c9:ec:0b:3e:cb:e1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fia.libf.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fia.libf.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fia.libf.ac.uk

Other certificates including the domain name libf.ac.uk

(limited to 100 certificates)
jira.libf.ac.uk
lf-droner.dk
etest.libf.ac.uk
learn.libf.ac.uk
brightspace.libf.ac.uk
static.jexport.ci
fia.libf.ac.uk
libf.ac.uk
brightspace.libf.ac.uk
townhero.ru
*.libf.ac.uk
app-dev.nuna.ai
actioniq.ideacloud.com
brightspace.libf.ac.uk
canmail.libf.ac.uk
fia.libf.ac.uk
authlink.trouve.noren.io
libf.ac.uk
fia.libf.ac.uk
admin.coastlinesolutions.com
learn.libf.ac.uk
www.thecouponcalculator.com
fia.libf.ac.uk
fia.libf.ac.uk
*.libf.ac.uk
*.iu.org
*.libf.ac.uk
*.libf.ac.uk
onlinedegree.libf.ac.uk
learn.libf.ac.uk
oasis.libf.ac.uk
learn.libf.ac.uk
lonmail.libf.ac.uk
fia.libf.ac.uk
app.upbycellance.com
careanalytics.co.uk

Certificate

The complete raw certificate details for fia.libf.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2avMJyJ6fZsPU/kQVu4C
SOhxh/tLeoa0lJF8Xwj7qsOwVwgkfQKFtVZe5u909t4VBoK6Ur7Qg1XspACCy3o1
4R2+A/AsyM4THzWyP73pEdmfZbQPhGj5d3kdm2I7uvM3YuLP8+yNrhJhdhk5g2a2
qyxYwNNdQpSUVcKDdQyqUc6gw/Gurbw1CGmXRPRs+mWB2MI7u1xeMJasD2008eXc
X1gRIx4qasHbjKFOzohnkQ+qZWOzRu4igWx4Fmy82e8QB5jZh4d9xGu90fkcso5j
1txy0SWzPGbJHLVFSxqSCUvOnpNQe3ovtdfcQ2jXlOpo4grjHWUlAi7u47bFi977
YgL4deGGDsOgrWe0y83IAek2WSRgdr5qywjeWkxyVvIAuUkR3rrxPURpIqU7ZVH7
m4gV8t1iIvoN1VSesrHeiBdFYs9Wt6HZ77yJf8Tc40x4Uq4MkaCiaPiykrdpHf8S
6Q3emJYLbU2dBIIp4EJf55wzz85YAyf/bi42OuiBwb4KOPJsZiva34z1RljTzpfh
Jm0rKiqVE39YEC5mkkv6AxmEQjG7WfHCsbCoZbckUgYZCgA3dGAG2aj1x2oLaHnn
RwRgy63s1HdagxTkJuDUTdCbCd9xrz+ZZc2EDkeIBYrDDXnaALUzcmLjllamGv2/
mnI+GxjOrNjjXheyNa81hhkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293071087097743906982873257243497168375286
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-05 16:45:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-03 16:45:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fia.libf.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 888020546112511433619999426311102775864477731390789502711792375959574014475673108306736337516641364102215045382293004103410263587825910228616335591465213408819367531608535835932161244662913071022707946894290433001735833641929231835185933668320851716895012276094808636582886477668561035393688904121652135339191618569405169797562372314027023989737025154377498478406320155694976659049030491764000042299232448721021358271243144031344641609183406869457183792470720900899944691398215407495112378152631094978633575322306504831917698030877741689887411357406916865285976097463963342334214416027631494120369520116220094716892786303563034310873793880907366555759452140724768978094444271748095970632479776920963970240056466815504957341974779691768991000836767754593262662116660849678187598910741584984278355163850813959231623237424407238776129673283640513190095767784232713641782965208579613524425876975342403083800210270606305610436829235053601151389173803139796445753676119672792302959503768864531320264096460349437473711005064363070975064992833660721631108919235148600445991576536718133271483461155364327509956792242822416551631797772529232550268247251559084912763022626286450358359216079839701374578503172404408265440432556028843795957515801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79e55a89322bce4500d1b1b938deb8b6d9c0475e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fia.libf.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c62e2c30d000004030047304502203e776861e90f70b2f95229c3cb06232f4808277d7689492f863b06f2f307e86c022100d09ed5a32a5105172799a5d3bdd6fedab39ca47792e47a8cbb4c815eb8b4f49d007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c62e2c4e30000040300473045022079fe4243b9b56bc3c439a357f4b33cee26dac50b9d7c01d32add91a53c5c8b85022100b673b5ba532811cf8e05557b28a0c6f53c25a9a26a769e6fa550d842ecf034b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0096fcadc2fb325bf761d21cdf0912ea3122895eec614a605d80d6bc55e4fd0a35e743d30b54ea12c1fd8399b84d019b05bbf75bdb171340439f82d950095aa5f4bb8c9db46339eab8c4adc7d6578ed6d806d88331a2c973cfef32db26b85c3b422741ad269c36df14ce28acba2eb1599515aee76a6a27775882360c3397d73a8307832bd765893b3ee8fb7ae5f48dfcc1ca005d74189a81acba452df0dc20d0f2db936cc3e7ac266ba7534242d48023e7a994d7473b5073a8d2d63593ba30ff35dc19608a0ddaacc47d9eb2a2591df1b83674b276180567a07ee9182c61b5c4e254e1c0d3fc2137d94000482575a95cc46222901259340e17835f546a42ad7c28