somersetbeads.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:a7:fa:a8:54:cb:3a:42:ba:13:ae:d6:b5:eb:2b:0d:14:53 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=somersetbeads.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:a7:fa:a8:54:cb:3a:42:ba:13:ae:d6:b5:eb:2b:0d:14:53
Serial Number (int): 405609480027479927299679663470443183805523
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e8:35:2f:18:08:10:24:a3:15:73:60:3e:40:1f:4f:fa:33:57:d1:ce
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d4:1c:85:99:2d:e4:b7:96:44:19:aa:4f:bd:fb:71:6a:e7:1b:72:c4
Fingerprint (sha256): d2:d8:bf:d6:09:76:4b:a3:32:5e:a5:97:3b:9d:4e:af:eb:1c:37:83:5c:b2:ab:be:65:11:60:ef:4a:83:f8:aa

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate somersetbeads.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for somersetbeads.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

somersetbeads.co.uk
www.somersetbeads.co.uk

Other certificates including the domain name somersetbeads.co.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for somersetbeads.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405609480027479927299679663470443183805523
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 22:20:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-16 22:20:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'somersetbeads.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 810745431107691268708309341926928177225002335856725325840679227376329642344654675335136799669626583498429703627762506094687596786471518674047304838311024491117827561985163900844085613284914377691061159407823647720615250336662144882707192556298128162599953548221847122510483995832061441607720422538154891013912946010699807280887754096862781886730624572782188960788476873276611047419648071721993406177179035965407324142211586612006693891033810045469625024056279169718131035199168828006934882661583630755495969494113599024518427040171120393746447853150518345783716574037436017504260888506997082561207975355738366827209410645886832270023057414908141471325313176376817212767319423388262167392939933632357914361914773033404834487596883226133323797621900379086113817922244837842783214768687935810332684776136258234904732384765617535897974998728837604049027687291968183982726205375249820458648297411082866669483068273531069362364327746765936289888095400330357808992618797466875900488956568886479205725333730056184414459561906791028857415462547108941832833542342404403307473239307005130435113274528068125685653530768281273387095786961497414561522182907764685199096390671555448278427330471228565082208845292212626774806742743878802484870951061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8352f18081024a31573603e401f4ffa3357d1ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somersetbeads.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.somersetbeads.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018eee5c577c0000040300483046022100dc7fd004983f6d61d9489c855e5733f9de7893583028458ef7ac3f3873bf49ed0221008cfc55f04fea7479a2091b84b3b995f08045639d197203bb7ef83fdb9b723795007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018eee5c578100000403004830460221009c031ef1fcae2168f31474a222082475186cc4ea1b24cbb4620c8cb23ccd4f38022100ad14ebddf496d97a50a3ef62a6015b04ec3ef0d316e4c01f2ee76eca27620d29
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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