chunkymonkey.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:8a:0b:0c:83:c5:94:5f:9e:b8:79:21:32:ba:38:b1:57:18 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chunkymonkey.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8a:0b:0c:83:c5:94:5f:9e:b8:79:21:32:ba:38:b1:57:18
Serial Number (int): 395422796850295956509596934098589355955992
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 68:16:c3:d8:62:59:4b:65:e3:59:b0:b0:12:5a:37:8b:ad:e8:d5:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 34:62:23:e6:da:88:99:9d:d9:d0:01:1e:6a:b7:94:6f:be:e4:53:74
Fingerprint (sha256): dc:bc:64:29:fd:b3:29:94:e6:8c:4e:cc:92:f2:a4:19:50:d0:f5:cc:62:82:6d:11:c9:13:48:48:ea:2f:79:d0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chunkymonkey.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chunkymonkey.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chunkymonkey.co.uk

Other certificates including the domain name chunkymonkey.co.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for chunkymonkey.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2SRNtUjlF4BhhJiOVhi9
8FivEO/LuJDCjQ9XoI+03da2dLYFMsn1nOecNJkZEdS39IZ1mdy4JntxCaosaIou
FAV/L91WWsTnZU9tCHBmaWjWdsMPIsl9Mo0t3njngA2d8eGoUzxatAe64kiUKK5Q
1vVcxxUzE2mSgwGEBGXrE3bwdhVwvd9lHG3yh/85jOK9nWHLE8+OsJcYCtteWygX
eOBwj7X9hiboX8wjoPVizak8LY2WVAO/jQjJWGtAOmv9N4PgvxHG6rgB5LVqpMAm
7gorDpkbo0FsIildjXRytKK0BsP1MvvqYIqA7CyCiEmaIIGVfdZA8sOXXs43jy5j
ZZxVxHTBHVzioqimQC9m6jMx2g8D0h97of8dOaGxFyvJnRMFM1tELCoBLI1AqUor
t7WuSakN3aBjLRKlvdaZLQ/iwKPZMNdNih/7hOSwccnTvE/AIi/MUVvPuJMpIlmu
wovDEtjZBJy5tL7JtqF2kLw/m//V2ea4q+6iDG8wGVltPWyoj3ZS39lgqt+UWJub
QG9btHKl1fbO52rGHPXTXS6K1rUVBEPpPuFM4j2aybLfjWgTFqdLy2ejy7EDgJaE
8wEEpGuvJN9dGYqqIQTUp9IB11CPkm48437CCx5Y1FaNn401x2kQIq1JGgRWMf3p
OIhtOHpNE/MxELWaA/+JM28CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 395422796850295956509596934098589355955992
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-07 22:07:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 22:07:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chunkymonkey.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 885861300072649264103024311638570656822727995336810823890114013523354519361349363893641881483218669539542495283227709327562845686333438417260249529510224688327258442482335472639960152797520951040662213402721414645309417108255213717275897995605348794583696243667045573471101678396810937525911818903221325412761862563674557156272013381445456029055010655867140959814105405906550504838413288918318595070336422877880570664345422717303142482439697601051054309918810875594223769469149376762229775606035776703342568180990823694354028597601803657004740937289346428006509033486847000308275872118043064460163670033193247370810734022355135730501102231658592225385928764675313762948377741735444084456518099300015517321906739742443558411285867331913316629300918714843690112596730063614978122247954522230323433135280931510728572908404843262446245394989766529775692761676237593386235270229938551442072092590141554579047619322975359509969680756527193729791080751761728757582848588226398166617024365999101769107825708204683665422639009924017497856379629109122784483141926703554069511286401613163497669174353273242795139581047680950931582162942493596929148106076599349657901176029962419064097311746327821046756886130261443028841470209952913826534470511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6816c3d862594b65e359b0b0125a378bade8d597
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chunkymonkey.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000166f06e817300000403004730450220621ee9ae4755059a52ad059a11bc4d9c28e97270ca1cd51eaa8744d202e6a45a022100eb046565d72a03c2110caab9df0563903dbff14fe759af8cc62c5ea76cadfa98007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166f06e836f00000403004630440220746a88a25116a6d1d6c6a50393b834b6fcb2595a967df279456f2a80213d11b0022078c65872f2ad446efe42a83a8012a7b2c9c9c7960535c7ee3296e3bf52d637b6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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