broadoakacademy.clf.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:63:fb:f5:fb:eb:ca:8a:6a:c2:f6:9c:0f:7f:96:47:a3:29 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=broadoakacademy.clf.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:63:fb:f5:fb:eb:ca:8a:6a:c2:f6:9c:0f:7f:96:47:a3:29
Serial Number (int): 382472011501452361401573229587310542562089
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 31:99:d1:e5:e0:72:d9:1f:bb:58:74:0d:15:62:8f:18:1a:28:a1:ff
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 26:21:73:c7:5a:fa:73:0a:46:90:2c:94:a9:5e:cc:38:ab:22:ba:1f
Fingerprint (sha256): d5:71:f7:19:5c:26:3d:f9:bc:99:15:a9:38:b7:17:ea:6d:0c:b9:ae:23:bf:75:f4:5f:dd:96:e7:e0:4c:2a:ec

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate broadoakacademy.clf.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for broadoakacademy.clf.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

broadoakacademy.clf.uk

Other certificates including the domain name clf.uk

(limited to 100 certificates)
clf.uk
jca1.clf-vps-001.clf.uk
hwa1.clf-vps-001.clf.uk
hwa1.clf-vps-001.clf.uk
clf.uk
tls.automattic.com
hpa1.clf-vps-001.clf.uk
clf.uk
clf.clf.academy
tls.automattic.com
staging.p161.clf-vps-001.clf.uk
clf.uk
*.clf.uk
staging.template1.clf-vps-001.clf.uk
clfhelpdesk.clf.uk
*.clf.uk
clf.uk
sa1.clf-vps-001.clf.uk
*.clf.uk
sni.cloudflaressl.com
bfa1.clf-vps-001.clf.uk
jca1.clf-vps-001.clf.uk
*.clf.uk
clf.uk
clf.uk
tls.automattic.com
wfa1.clf-vps-001.clf.uk
ba1.clf-vps-001.clf.uk
koa1.clf-vps-001.clf.uk
epa3.clf-vps-001.clf.uk
staging.p161.clf-vps-001.clf.uk
broadoakacademy.clf.uk
ba1.clf-vps-001.clf.uk
clf.uk
sts.clf.uk
tls.automattic.com
clf.clf.academy
clf.uk
clf.clf.academy
sni.cloudflaressl.com
staging.p161.clf-vps-001.clf.uk
tls.automattic.com
bpa1.clf-vps-001.clf.uk
ba1.clf-vps-001.clf.uk
dssb1.clf-vps-001.clf.uk
clfhelpdesk.clf.uk
jca1.clf-vps-001.clf.uk
bfa2.clf-vps-001.clf.uk
hwa1.clf-vps-001.clf.uk
tls.automattic.com
demoslider.clf-vps-001.clf.uk
broadoakacademy.clf.uk
bpa1.clf-vps-001.clf.uk
clfhelpdesk.clf.uk
clfhelpdesk.clf.uk
wfa1.clf-vps-001.clf.uk
bfa1.clf-vps-001.clf.uk
clf.uk
hpa1.clf-vps-001.clf.uk
hva1.clf-vps-001.clf.uk
clf.uk
sa1.clf-vps-001.clf.uk
tls.automattic.com
portal.clf.uk
clf.uk
clf.uk

Certificate

The complete raw certificate details for broadoakacademy.clf.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14wqNxjiUa/GFHw1ph69
6jlpORnX201tnn0NnwGrDCirKrITajQcZ3Z06b0aMdB3UaBlKB1aGZYRDc/Kme3L
J4rI6T3DMSyhJe4lZ0D4l8gbCgdxXYFNMbQ70rHGlzGUIB/bG5poR4GWt3t4d2h7
oGC0zluOnTpmBd5G0BsQwdwk47nnbwtHXwCRxg1K4749qxIha4xvmJi3Q+T7J3AN
8f1zFU8lLkIcv0hu0j7YOn3RU1pE0vIK5WnYzLpVeLbRQCNtp9U8m7Ogu5Gxd5+p
QHaGQnVS3wQDb8dBDyn4sXV2A3cmLu7frSGJ/GnUQQjafw59IA4ROwjCtap4eXYd
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382472011501452361401573229587310542562089
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-15 23:49:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 23:49:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'broadoakacademy.clf.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27210353457537743390038333048727195294851774506726070308260359883009883879573419659254372905507941630785923754420845953596382412593112587545345382695645559193238163138792317720198252893619520965741387896127582533605705154175584040510786100251443380741437191054286340487174980580792796587701196447658761322539008010392946570145694541747842707167630821330458307402170229382867319561956219379030734884265783363569703341511846482371110929987314303433353773992325846648349853650119589868023151784416581819723245709990271943670314565255337442659935322671654011381227818851454265181128852655669144527648324668909669592735003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3199d1e5e072d91fbb58740d15628f181a28a1ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadoakacademy.clf.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bf84171dc0000040300473045022100e40fe7da0c301eba21662f3ab02c9c8877bcf07b9dcabecfac4432a06256b66e022022a7295b76c3e284d0792bcdb1afa4e98773f3fdfbb839626cdd792e858dd3ed00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bf84171a60000040300473045022100f059be2a532ee5f0bcaff6637d0dd75702ddfc24323757af26eb9272199e9f0a02204fbf09d8951c1da38eff428eb3ff67b5abd006224df5897c73cb7ac09b1be542
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004a95abbbfbd848dea569b75241169f4909cf0955279f810a9e8d6f0e6c1bbf256dd93c3bf21aa542976139b1a2634b2acc272b95efe9c01c7a3f69fcac3508a583e70090e45c4957a899ff9a0a9be50c5ca8a6ad2fa464694cc00802faaffde63fbc89c69999eb7ac7326c21dc42651dc8097300a373e89c1da8ce754d2eed32bae8b3255f702940d96a2d053da2e8763d029e359cf028fe5086a3d034b6e22e00c45bad9a9e06e41a1d59e0e1f44002adbf316760ba184ba66256b8b03c45c83c0d984ba9f1a0b16d8681f6fe3b7777594d5b4b7e4b9a2f2c0f36102ef51071b1a5f7e394e8145d6a483bdd081ffa4d1db52e4e488c2e58dc70be5292bdacfe