www.basingstokerecruitmentagency.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:97:b0:fa:aa:59:0a:1f:52:3e:9d:b5:ac:33:a9:bb:d9:75 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.basingstokerecruitmentagency.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:b0:fa:aa:59:0a:1f:52:3e:9d:b5:ac:33:a9:bb:d9:75
Serial Number (int): 312954740856879298623120700423989955910005
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:82:c9:60:69:53:71:bb:0d:c5:27:2d:13:3a:aa:24:e9:6e:f8:67
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 53:97:dc:5b:4e:fd:f0:89:e9:81:ef:80:7f:12:60:6a:d1:ad:26:e6
Fingerprint (sha256): f2:08:28:49:1b:42:c2:55:15:68:2a:15:0e:00:cb:46:2c:c0:9e:63:cc:8b:d1:fe:fe:68:7a:b5:bc:08:ba:66

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.basingstokerecruitmentagency.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.basingstokerecruitmentagency.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.basingstokerecruitmentagency.co.uk

Other certificates including the domain name basingstokerecruitmentagency.co.uk

(limited to 100 certificates)
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk
www.basingstokerecruitmentagency.co.uk

Certificate

The complete raw certificate details for www.basingstokerecruitmentagency.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312954740856879298623120700423989955910005
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 16:57:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 16:57:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.basingstokerecruitmentagency.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 861078296690292203473413627271176727611485575745931135273920359886676568968711949316734516919633605730314478156224081304731202122763195552856438892669466356705125849957864538570682505501267400200131053558098464795670530419739736400476244308410227487432841855571520364359338568826024585344915561675281611552754403558350730637421214215671149671442874216092798044747359700203712712293328098955211895085397004166143693427116710909320732463913996967359992588242935466833965824069770571280779535956851131569998215203658763183095286909182693127638198126170073144978992665417829458610508634107582785419212849792317707390051948967596465959644419621222846266003590492502666132018611127374488477504640835174625911934790292725909234502870802628214222071388966676228927020525716322105571097024768017606389927855403966194495084070195102613430916045146857020223318229375029449135503612277571668141913364567090159698970547575119397487088567141877838108165877343341321106257772684404933076888724414584873001023160499013485492790281949609493584832276037537729099998797520078678065123947355558161072429976996737685383981584292078503157766619837949670491072678854775182802790733516349762628430422373773953061389949638130254443536236862827867472489767989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b82c960695371bb0dc5272d133aaa24e96ef867
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basingstokerecruitmentagency.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ff7998e430000040300473045022100f80f3859c886b3d70e2cc23b121312060fba06ea8a7efefc0b6098816f02b18a02206564fbc02b7b71dd66d9d4e1600d13672e0a4ce77e8848a11e1bbf39f27361a500750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ff7998e6b000004030046304402205d635754f63b3f626af154167ef138089f0012176ecceaf9e812f8c98b2b949d022028aa56fd0b2b40daedf95f345a44e0e18ece46cbf2709a9ba374f4e68149116f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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