DV SSL/TLS Certificate for www.cambridgeshireinsight.org.uk

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the www.cambridgeshireinsight.org.uk DV SSL/TLS Certificate

This certificate with serial number 06:41:50:e4:6d:37:77:50:7f:a8:8d:58:0c:1d:e2:e6:bf:9b for www.cambridgeshireinsight.org.uk was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.cambridgeshireinsight.org.uk provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:41:50:e4:6d:37:77:50:7f:a8:8d:58:0c:1d:e2:e6:bf:9b
Serial Number (int): 544899593738946140984795061260361874718619
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 8c:db:33:e9:41:06:b2:26:2f:34:91:0b:97:3f:a7:c3:58:c4:76:7c
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): fd:07:cf:e1:9d:94:76:85:24:4d:3a:2a:d6:f7:dc:fc:05:e4:57:33
Fingerprint (SHA-256): 53:07:73:9f:76:32:27:08:35:61:89:bf:9a:b8:4b:4b:20:58:21:98:b0:31:03:68:24:cb:a2:a5:55:b7:91:10

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/28.crl

Check the revocation status for certificate www.cambridgeshireinsight.org.uk
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.cambridgeshireinsight.org.uk

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

www.cambridgeshireinsight.org.uk

X.509 Certificate

The complete raw X.509 certificate details for www.cambridgeshireinsight.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoLZydZ7H0TYC3LvkZsl
AbHtJU4PB16Q0VCj5IA8wdenTSWT6dDmZBF2m2QPoU/w2JuNQoQpT5a0DJaf1NMH
PyzPT35MkoVmC5fgudCq9EqrIg2t2z4GytJRCJYMOR0d79dkjhLPTDbhxXcgdtUd
3e33K/aU15XaYC0hteoP5N12d8ZsRGRzuzznMTUFt3ssp6puA77vA9JYZYnbua/8
jzNbBiXaRFlZBxyZbGaUYlMeyLRlYZVU+dw4NF8BIPXLQVDSJi8jSOypt/FNGIpz
EYGN8r1cOnQJhvSq2aIGjKJf6u6cbHkZJqvWY8HFAwc+rJv+mE6qI29XifbdEXbp
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 544899593738946140984795061260361874718619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-16 15:23:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-14 15:23:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cambridgeshireinsight.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23039896406645312729427052962298293148798156479034230920932751137165578435840380681411269859220723628213268559697782627356186144144515182011522092040076907969138796741010357605749048115301698044611376680893513275185562854581567876835139016299697173121752392312275372112506166595587137422036100017395902815408283315142283644158575463916592140666392568781796904886900473024906272379227630380491445640726675348773571661626351030811709008591452325740248206038187685709869649133859149916938067593146942190308126162204652763567507663423996272907951504723083202573791329615867608376230584576914387643083615548991482168273207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8cdb33e94106b2262f34910b973fa7c358c4767c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambridgeshireinsight.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/28.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a00000197798c98620000040300483046022100ca678e47da92908cd3375eb0061221daac21dbca48c8b0f8a566f9f0f21446d2022100c99049d6b549d8d2bc516ca18d786c0e20f099ec2f50447e07baa50b672e2f5f007600a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a845400000197798ca7e10000040300473045022100e137c2d9c526f6e09b535ecd40c442c4a2bb6993689aa9eae76244875adee239022014750d4e78c3869744c94329bd1a4329e507de27204b8a44949bc0ab066c2039
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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