stgroup.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:68:4c:42:d5:29:ca:67:fe:45:0c:ef:ed:54:29:5c:75:03 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stgroup.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:4c:42:d5:29:ca:67:fe:45:0c:ef:ed:54:29:5c:75:03
Serial Number (int): 296827592297794898978015644397197600781571
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: de:ed:c6:7a:64:e4:f0:9a:be:c0:df:a7:87:51:05:ac:91:3a:c2:f2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 57:62:41:ad:3f:fa:4d:0c:16:f3:24:2f:c4:d2:d8:37:ec:c3:a4:3a
Fingerprint (sha256): cb:71:e0:d6:58:8b:d2:09:ae:17:22:79:11:7a:7e:26:a7:20:43:a6:d7:4b:d9:56:7d:01:f7:e1:87:b4:d3:61

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stgroup.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stgroup.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stgroup.co.uk

Other certificates including the domain name stgroup.co.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for stgroup.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296827592297794898978015644397197600781571
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-08 23:05:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-06 23:05:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stgroup.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790424096123031565524649364567397037637256166025861194873092553348434192168653913963762939201583344768827020326755256672259007891577953850965323023890636762482189017509762988443592826863197980816061740893089348555273108273598816344887847543532348680192834259617649723235408161903078892528947425275621468534722741913472458689097932576809619250525716396392882696171348740854131386061967164406838312030256336543506606651043889388828372963356290132200370308102755666004049871985953898419590546817205195273097534857957165503923887809004023494620219742908763774608836657601190824348671177382774556810643040699559525490306170854582895657860711072067490871134268589454983889122411725916029662947468139419193723659216267408821455713101883415357075708088459804351631266779003037315757693885668830201795144757831907146587286009222648807114164341191027259511483235561680734172717729552989551358871534917340438868424389979187085253878687258076448504643376311673625525138792893347196695201705409512954973544750563875729944562588060374529481720429021885807905015974990221182563010785658336880078596647374784500344746108964223887030835989115261989358260867800800012779192929755461114984143871749592096600394753582621091528669171150759477345548093731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							deedc67a64e4f09abec0dfa7875105ac913ac2f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgroup.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001695fc529eb0000040300483046022100e8672773908f27a685e8104ee6bee4188778e07aaf1291a3e91add3d4f952c3e022100e9e3c5ab94cd42c56adbe740f27bff1c123c34ea4b9d1027c874ab5c3cdc4d38007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001695fc528440000040300483046022100959fa2c605c8a5265992f7fead8579033c3905c9e238baaba3c7e78705ebe7af022100e7bffae1321d1a6eba49723fb0c3debb3fe4a947b2de487bf5d41f40f064ce13
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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