norwichnakedcakes.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cd:a5:ce:44:91:7a:a6:ae:bb:f4:6c:ea:39:b2:4c:6c:1c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=norwichnakedcakes.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:a5:ce:44:91:7a:a6:ae:bb:f4:6c:ea:39:b2:4c:6c:1c
Serial Number (int): 331315136637260389534309198255483148594204
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:4a:79:fa:a2:51:43:5a:ee:6e:80:75:20:1b:26:57:ad:d7:ce:44
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a6:f8:61:99:33:d1:63:4b:22:74:61:04:ca:02:17:07:b6:e2:62:fb
Fingerprint (sha256): d8:a5:c2:8a:f7:77:97:81:0a:68:a9:8a:70:07:0b:a3:c2:4e:4f:ab:26:33:bd:86:85:7a:6c:b9:d3:45:94:b2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate norwichnakedcakes.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for norwichnakedcakes.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

norwichnakedcakes.co.uk
www.norwichnakedcakes.co.uk

Other certificates including the domain name norwichnakedcakes.co.uk

(limited to 100 certificates)
www.norwichnakedcakes.co.uk
norwichnakedcakes.co.uk
www.norwichnakedcakes.co.uk
www.norwichnakedcakes.co.uk
www.norwichnakedcakes.co.uk
norwichnakedcakes.co.uk
www.norwichnakedcakes.co.uk
www.norwichnakedcakes.co.uk
norwichnakedcakes.co.uk
norwichnakedcakes.co.uk
www.norwichnakedcakes.co.uk
norwichnakedcakes.co.uk
www.norwichnakedcakes.co.uk
norwichnakedcakes.co.uk

Certificate

The complete raw certificate details for norwichnakedcakes.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331315136637260389534309198255483148594204
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 01:27:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 01:27:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'norwichnakedcakes.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 817903349571502391426074600951810286272904262815407634908779744137120441529599305428102123334426035620373684574404081132173507404481534432746904205786161268289972862355001693796332989546634737664720108489477617726333948297384198213514997793472543363126026585698649355560188410599867322296197362643788222151255735664999873269292679890787557063819844769723786022844974344311598780592702613790013018392278007866390690788647817625287623261634569006739780206037155148760150676263803993854634424543835462397369884465328720230143564520875226398350695247160527611103628412954969035194842256465647313399204821207419321503994120344542330440392858781614682506819485055094031478296062769307961019391037995855648973600584483756522164376779498248204628242496409393518661859120107152359174121477902613073420660210259070802584768607693763470549081498091861504489827272881802033468981528713066426866227322426395057423905395602684720795002710546512159785116941571089189355497298981812070939834490675482205826552724147940902202919426077151843317229594477465481979087380490767505603246957025723618996414655365200346063370810590103315984284788080099697303376909446381605179706826471330177371288345094347569850132199846609307199892179910478960014122065599
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							394a79faa251435aee6e8075201b2657add7ce44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norwichnakedcakes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norwichnakedcakes.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f59c7c5b00000040300473045022100a53a26907ed4f0b7d1eb15954666c9625180c12dd1caa6881e0c7455de95ac57022034efe164b0a4a98f161cd04e85c43be54bb64dd0d5f2fd1180f55de8df96612800760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f59c7c5d30000040300473045022100f97b662dc71d9fe2c692ba700bdbce912acc165167cc7f9bce06a5ae7a948fbe0220427313db9d1314fd4f0279af3dc9cd5dd153195f235ce91941785fa32ec3b062
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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