www.aspirafp.co.uk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:01:7a:fa:27:b3:43:27:36:60:78:4f:28:27:31:0a:fa:7d was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.aspirafp.co.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:01:7a:fa:27:b3:43:27:36:60:78:4f:28:27:31:0a:fa:7dSerial Number (int): 348952890788878917026381174454321926568573
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 3a:93:9a:15:d0:88:ab:2d:84:43:3e:b1:a5:36:06:c8:05:33:b2:17
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bb:58:c8:f1:27:5d:e1:e3:9e:16:ab:b7:0c:60:d8:b1:13:39:7a:20
Fingerprint (sha256): ed:b1:4b:a2:dc:58:64:56:28:cb:78:30:61:3f:0c:28:9f:af:8c:33:c4:7a:4e:59:58:13:a2:3f:59:6e:07:09
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.aspirafp.co.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.aspirafp.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aspirafp.co.uk
www.aspirafp.co.uk
www.aspirafp.co.uk
Other certificates including the domain name aspirafp.co.uk
(limited to 100 certificates)
www.aspirafp.co.uk
aspirafp.co.uk
www.aspirafp.co.uk
it-helpdesk.aspirafp.co.uk
helpdesk.aeainvestors.com
aspirafp.co.uk
eedesk.hayden-homes.com
servicedesk.orn.net
it-helpdesk.aspirafp.co.uk
aspirafp.co.uk
it-helpdesk.aspirafp.co.uk
it.ziahomesep.com
aspirafp.co.uk
www.aspirafp.co.uk
servicedesk.orn.net
aspirafp.co.uk
www.aspirafp.co.uk
aspirafp.co.uk
eedesk.hayden-homes.com
servicedesk.orn.net
eedesk.hayden-homes.com
it-helpdesk.aspirafp.co.uk
www.aspirafp.co.uk
eedesk.hayden-homes.com
www.aspirafp.co.uk
servicedesk.orn.net
it.ziahomesep.com
it.ziahomesep.com
www.aspirafp.co.uk
www.aspirafp.co.uk
www.aspirafp.co.uk
it.ziahomesep.com
helpdesk.aeainvestors.com
www.aspirafp.co.uk
helpdesk.aeainvestors.com
www.aspirafp.co.uk
helpdesk.aeainvestors.com
www.aspirafp.co.uk
aspirafp.co.uk
www.aspirafp.co.uk
aspirafp.co.uk
www.aspirafp.co.uk
www.aspirafp.co.uk
aspirafp.co.uk
www.aspirafp.co.uk
it-helpdesk.aspirafp.co.uk
helpdesk.aeainvestors.com
aspirafp.co.uk
eedesk.hayden-homes.com
servicedesk.orn.net
it-helpdesk.aspirafp.co.uk
aspirafp.co.uk
it-helpdesk.aspirafp.co.uk
it.ziahomesep.com
aspirafp.co.uk
www.aspirafp.co.uk
servicedesk.orn.net
aspirafp.co.uk
www.aspirafp.co.uk
aspirafp.co.uk
eedesk.hayden-homes.com
servicedesk.orn.net
eedesk.hayden-homes.com
it-helpdesk.aspirafp.co.uk
www.aspirafp.co.uk
eedesk.hayden-homes.com
www.aspirafp.co.uk
servicedesk.orn.net
it.ziahomesep.com
it.ziahomesep.com
www.aspirafp.co.uk
www.aspirafp.co.uk
www.aspirafp.co.uk
it.ziahomesep.com
helpdesk.aeainvestors.com
www.aspirafp.co.uk
helpdesk.aeainvestors.com
www.aspirafp.co.uk
helpdesk.aeainvestors.com
www.aspirafp.co.uk
aspirafp.co.uk
www.aspirafp.co.uk
aspirafp.co.uk
www.aspirafp.co.uk
www.aspirafp.co.uk
Certificate
The complete raw certificate details for www.aspirafp.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgISBAF6+iezQyc2YHhPKCcxCvp9MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MTAxODQzMzZaFw0y MDA3MDkxODQzMzZaMB0xGzAZBgNVBAMTEnd3dy5hc3BpcmFmcC5jby51azCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALjChyrr015MNbPxSMEFR0wMua6j bTg8AGuCrlWgJkHHw7JLYwx7AdUQbfmXjPVu05QUAhbq7gt5yn9eLx7+zTvaWyti X/XDqtdjhjfyLrRkUKbi6PWRq6ubtAHd6PrUg9LJKFFhHdFKAcJcGfXIgrScTh9f SDYHePAWbdKJ/CfpZtzVUJKYSmh+w4Txiu2zZChEW3+gdPP3R+BeQLbqoM7qXAwJ b0jsLymzPgFNVjXHFX/TgJ3YUo8WwMxfA2cVEnNPly6sucPi0JFYebZ58OiknhmZ LspPD6OKJG7Vn2pF6AwQrPJmZ5vdso56rv5OyfHAv435rCrqrfMCRsd5uvsCAwEA AaOCAncwggJzMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUOpOaFdCIqy2EQz6xpTYG yAUzshcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzAtBgNVHREEJjAkgg5hc3BpcmFmcC5jby51a4ISd3d3LmFzcGlyYWZw LmNvLnVrMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHW eQIEAgSB9QSB8gDwAHcA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMA AAFxZZ54EQAABAMASDBGAiEA2qO06Bhqh7gypYY7705tNkOZsr1L0vPIvwHGK9iT rtsCIQCV4moQV8NgSvd8aw3USNmqDkADHSFSSqbGWaZsLQ6F7QB1AAe3XBvlfWj/ 8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABcWWeeDgAAAQDAEYwRAIgHwXTzBuj NXV1ufIvxcLfT9FoTnd6vR2yd+VjJK7ogfACIFz+a81go59hS/NoPfNEYR7+V5Gp ZBtAw5w9/aMbcG+qMA0GCSqGSIb3DQEBCwUAA4IBAQCCbzxYzcbT44+cuYW/oQeC Mrla/gtlCZiwdoInCgBj+XFqDAgDc8cicR43rtYD2R5I/JtytNvjxXjcD7C4zo6e vZMW+mySafHWLc8HkhLu6vEcGPZP3eQ0l99ePzXksXiSh7tpS6iUr1gPt5I74RKZ ARrdFAMDOkwvsNlWtfisShvq3plToDpUCbMlMECWacO6Ieazm+q7WHcR6tnRBouY 7YCxL9wdKZBfz8QFf7hysOpuoDrPMelNzXTzPdAE9HQhKUpQ24gZ/ej3TPPQLOFb e2YEB8sgfrcQ4UYFNUAdxooszGcRN2A4tGAsyygL+p8jBsu0yap/TndugiHbK89C -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMKHKuvTXkw1s/FIwQVH TAy5rqNtODwAa4KuVaAmQcfDsktjDHsB1RBt+ZeM9W7TlBQCFuruC3nKf14vHv7N O9pbK2Jf9cOq12OGN/IutGRQpuLo9ZGrq5u0Ad3o+tSD0skoUWEd0UoBwlwZ9ciC tJxOH19INgd48BZt0on8J+lm3NVQkphKaH7DhPGK7bNkKERbf6B08/dH4F5Atuqg zupcDAlvSOwvKbM+AU1WNccVf9OAndhSjxbAzF8DZxUSc0+XLqy5w+LQkVh5tnnw 6KSeGZkuyk8Po4okbtWfakXoDBCs8mZnm92yjnqu/k7J8cC/jfmsKuqt8wJGx3m6 +wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 348952890788878917026381174454321926568573 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 18:43:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-09 18:43:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aspirafp.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23323773445087707965716000298372126799386208890980718264401507373051209052439554293370826992225697063216921760182417998248367797806191032188645039431698776645005367969658476280572328649196833958417382507603205992515543891494711810196114270308644141817301389779447985136125338574032528503421447987723889391342545355174896700136475737251656483869832229391845814668216295379203487225063357335446288155017782891404126459444083047774798242669079650234408408379253360186972316673736825390293168043685299394215195190032966491393914001489240041863179655180067317264033362258680454450188616766983658845678656803839815957723899 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3a939a15d088ab2d84433eb1a53606c80533b217 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspirafp.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspirafp.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000171659e78110000040300483046022100daa3b4e8186a87b832a5863bef4e6d364399b2bd4bd2f3c8bf01c62bd893aedb02210095e26a1057c3604af77c6b0dd448d9aa0e40031d21524aa6c659a66c2d0e85ed00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000171659e7838000004030046304402201f05d3cc1ba3357575b9f22fc5c2df4fd1684e777abd1db277e56324aee881f002205cfe6bcd60a39f614bf3683df344611efe5791a9641b40c39c3dfda31b706faa . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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