public.graphql.activities.lesormesjersey.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a3:91:1f:9d:e8:9e:94:cb:dc:81:c5:04:fe:e2:8d:9a:2e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=public.graphql.activities.lesormesjersey.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a3:91:1f:9d:e8:9e:94:cb:dc:81:c5:04:fe:e2:8d:9a:2e
Serial Number (int): 404108071758513703504155884462480896662062
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0f:f0:14:25:22:09:06:19:7f:9f:5a:04:2e:3c:78:6c:8f:7c:dc:03
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b5:13:e6:08:d4:bd:34:7a:25:0d:46:8d:53:29:e5:0f:11:4a:36:e5
Fingerprint (sha256): db:af:ae:8a:16:85:fb:bb:90:8c:cd:20:88:7e:4b:3f:aa:5e:3f:a0:c0:b0:97:98:e4:75:46:d1:34:07:cc:f3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate public.graphql.activities.lesormesjersey.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for public.graphql.activities.lesormesjersey.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

public.graphql.activities.lesormesjersey.co.uk

Other certificates including the domain name lesormesjersey.co.uk

(limited to 100 certificates)
www.lesormesjersey.co.uk
public.graphql.activities.lesormesjersey.co.uk
console.activities-staging.lesormesjersey.co.uk
www.lesormesjersey.co.uk
www.lesormesjersey.co.uk
www.lesormesjersey.co.uk
activities-staging.lesormesjersey.co.uk
console.activities.lesormesjersey.co.uk
www.lesormesjersey.co.uk
www.lesormesjersey.co.uk
public.graphql.activities.lesormesjersey.co.uk
terminal.activities.lesormesjersey.co.uk
email.lesormesjersey.co.uk
activities.lesormesjersey.co.uk
www.lesormesjersey.co.uk
terminal.activities-staging.lesormesjersey.co.uk
www.lesormesjersey.co.uk
www.lesormesjersey.co.uk
www.lesormesjersey.co.uk
www.lesormesjersey.co.uk
activities.lesormesjersey.co.uk
www.lesormesjersey.co.uk
www.lesormesjersey.co.uk
public.graphql.activities.lesormesjersey.co.uk
public.graphql.activities.lesormesjersey.co.uk
www.lesormesjersey.co.uk
activities.lesormesjersey.co.uk
www.lesormesjersey.co.uk
www.lesormesjersey.co.uk
activities.lesormesjersey.co.uk
activities.lesormesjersey.co.uk
activities.lesormesjersey.co.uk
public.graphql.activities.lesormesjersey.co.uk
www.lesormesjersey.co.uk

Certificate

The complete raw certificate details for public.graphql.activities.lesormesjersey.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404108071758513703504155884462480896662062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-02 08:46:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 08:46:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'public.graphql.activities.lesormesjersey.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 810651284916349991972967860836745442801793640918523043065052726092755719699052976418610568521946766207220655139568713411983622038555889094466808154908885571405194836994514065578077406504384211278605896796122243345971213568197894767006102773868874454051797898113536979079131227086084237886278352271223002457483796698965046008110421387199292743588091176516116772895342655766625569822766400835167659185797312970971842446175070284598035234576109510621035616449649890328365734583292197063132404230236214120343308870195182972558020870102719662624545911937308657296167919632317031458812195976588900004760471115680906517006556950087093963712376187866323929062434567185973470621938132882371580758056650395850518134605717603167110003285370324788261649496391174217558270198392720178206063992720625210818225053710459886135231456663444446961116670125289177194564063885780415310493562023452772422807960715769243083770967739553509600770405450070879654045134733020430312734387533183271187442518494424853956525156406198065135306925927123128852687116197918735283816663168396619890201306104282635473955258491917169991484821001687259135211032219711590411199686092495556703869848760702892373620300522344104483099892424102606330971853154171844319532108813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ff01425220906197f9f5a042e3c786c8f7cdc03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.graphql.activities.lesormesjersey.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016bb2141ee200000403004730450220148b2331784899e130f39f5378bc56bb02a4e89602ef192ff9a8e0052e5c815a022100f17b75b5f531d3d296f01de8e5791a36d205dddadb5a4ec71f4eec6ce056772800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bb2141e8200000403004730450220799820d6d7af6df9e0dbadeefcc995225da688167cbb9a0f433ad3fb8dd1af130221008a514e7053f2182d0f1ba790f42e4c15887e890675c3c11ed7b1f99f39457cfb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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