haveringteachertraining.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6c:26:61:d6:1e:a4:ab:e8:31:b7:c1:cd:a8:e9:98:dc:ae was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=haveringteachertraining.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6c:26:61:d6:1e:a4:ab:e8:31:b7:c1:cd:a8:e9:98:dc:ae
Serial Number (int): 298138372082240662096683879357915634130094
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dc:ba:9a:81:5a:1e:4f:6e:ad:1b:97:e9:55:11:b5:99:03:f6:13:4d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c6:d2:19:f8:df:35:2c:d1:68:57:9d:88:6f:0f:e0:64:c4:09:fd:02
Fingerprint (sha256): dd:0e:64:6b:4b:49:69:13:44:22:c4:a7:02:6e:7a:9b:27:a1:52:21:47:d0:3b:61:bc:fd:03:61:31:bc:6c:73

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate haveringteachertraining.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for haveringteachertraining.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

haveringteachertraining.co.uk

Other certificates including the domain name haveringteachertraining.co.uk

(limited to 100 certificates)
www.haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
haveringteachertraining.co.uk
haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
haveringteachertraining.co.uk
www.haveringteachertraining.co.uk
www.haveringteachertraining.co.uk

Certificate

The complete raw certificate details for haveringteachertraining.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRciv00WzOFYY6091ggQ
2z+jT/z2FJHYPYZzZHy5SLOfX/Kew4EWDOp6MLzyN4nwwFTDMhQM7EglQH4j27QT
6Nkce2Xh///ZEAN4nNu5/Tk1Iv1+1WGNRqreTlHcyiWqKgQmjV+5+0t5mlO9G9jQ
mKaigxNRB7Mq67Bz/fywsr2pOsfcBU/crpBzPEYlJA20ld/BEbUAIw4oI9A6sh0g
FwHlFW8uA/i+HR7f2M68u+3TR1QcBjLmvizlC+bMxOW5BjgJC7ZpKmbsB4DqJPIL
DpcFEP8UN4EI/HqPDRhQBVArf2z333h9CYdr4Qz6q2hz2b2/cTYNhiiCffyRawDe
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298138372082240662096683879357915634130094
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-18 11:11:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-16 11:11:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'haveringteachertraining.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22355588633413025337865424968705321517432610964220069921457628775373347035253816199799871462371523267959068905789708887413762470209486410158711674851147095509013031742733030796328212345920680675468120289606526785554054150812474236849370133156304879964011134608964726891683057281948718473287611888269819206443578710637215690116417062574927945981693783384633143114493114041179365046767320653352610081463594296391105556332866014381346187351766376047576313826704792574881736014374482500744979388894507700122656533013227278426517538352569664707549075459233232352186843382735461007074458653613334505924262644964991185247873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dcba9a815a1e4f6ead1b97e95511b59903f6134d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haveringteachertraining.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001654cf2e8bc0000040300483046022100d8639777cbc9c66d81b4521ccc2dfe0d27b78101a79371bc6fd87665af5ba143022100f3235a1564e91f96a6d898e0135714e78a328be157daeb9d997a321bc3f5f35e0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001654cf2ea5d000004030046304402200bd82006819f45791c5fb8541ee66639a261964e20d16768f36a4b78df9f138502206bea8d15467f3b36b840f1d75376e31105d23db864a4bc16e4a01325e8b4cd49
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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