sport.kgs.org.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1a:09:fa:99:49:1a:9a:1d:6a:c1:01:c6:8b:9a:d3:2c:6f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sport.kgs.org.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1a:09:fa:99:49:1a:9a:1d:6a:c1:01:c6:8b:9a:d3:2c:6f
Serial Number (int): 270197463570402396085679042811846812970095
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 80:fc:ee:d9:20:e8:13:88:b1:33:f8:91:17:81:f8:bc:33:74:32:20
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 02:8e:59:3e:cb:ef:df:e3:8e:4b:4f:43:12:35:6a:4b:ae:c0:b5:c5
Fingerprint (sha256): fd:d8:29:fa:64:37:e2:7a:3b:f0:52:bf:38:df:a2:9e:41:17:b4:d3:93:58:e6:1d:ee:0d:68:ba:61:3b:aa:7c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sport.kgs.org.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sport.kgs.org.uk

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sport.kgs.org.uk

Other certificates including the domain name kgs.org.uk

(limited to 100 certificates)
sport.kgs.org.uk
sport.kgs.org.uk
intranet.kgs.org.uk
*.kgs.org.uk
*.kgs.org.uk
intranet.kgs.org.uk
cc4.kgs.org.uk
kgs.org.uk
sport.kgs.org.uk
*.kgs.org.uk
sport.kgs.org.uk
kgs.org.uk
*.kgs.org.uk
kgs.org.uk
*.kgs.org.uk
kgs.org.uk
kgs.org.uk
*.kgs.org.uk
sport.kgs.org.uk
mail.kgs.org.uk
*.kgs.org.uk
kgs.org.uk
intranet.kgs.org.uk
kgs.org.uk
kgs.org.uk
cc4.kgs.org.uk
kgs.org.uk
sport.kgs.org.uk
sport.kgs.org.uk
cc4.kgs.org.uk
*.kgs.org.uk
cc4.kgs.org.uk
sport.kgs.org.uk
intranet.kgs.org.uk
cc4.kgs.org.uk
kgs.org.uk
cc4.kgs.org.uk
sport.kgs.org.uk

Certificate

The complete raw certificate details for sport.kgs.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAqGZFrrGpHs4n24NK9gKx
W3pcVsjvY2ur8eVvZjw3b7fxDV8o5A3bFKn9LpXb+RZt+s36zGJXEDUJeMM25bDu
Wi6JoPCYAASq3szuy2qGSatbjV0S1Li7OO90W0w0zDvTTRxkH18cjzivQJ+6iDTt
jeqmR2DwAljtLghonoQMI7+rzjzkSIEIHeJ6RyfK0NKf3+GOIN8GnDGkaaKDPShg
G7TmFjrOjItMgNc4Oo056jM4ysP1y1d1mVkwN4vCwtIZBNczG5wZeip7qviTZxVK
UUUDASAYsjX/M5oBRjVpnlFQBCtGHI+SKsAM9vJivtYRBnO+h1l1g0206cCr9E9C
etURrCTTdPACw3VFNi5cMGwumy5nzbaJXA2s9ZrVW9imr1PTtGgDY8tWarYYHyrN
w0i0DMt7PI1Z/S2JpTCBsS9l9s5KYEa/nmxO0T11fF7AwqA81xES5nYUHKncE4E5
uNkhp3qC9+u0rog4cVD/7Fzk9jPTEpLXYvRldiAMLMVDAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270197463570402396085679042811846812970095
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-19 04:43:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-18 04:43:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sport.kgs.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3821620114394518826192118492016313254944563409986261583333770617744778713355316695707679300793291691119107324638065996174239598927550331796669684248909807142719328897842988108038902338526346517950501039572350366046961763580752932785123309312762866473351128898068999219943808714549571171431423578527181625813236745272535166429839283285149673452113119652149061647354020718301358249746819716156915331670839264683243159436324058168565647019594956408008976407260828661995292571562806358664911478121732873487320924289031105093238126467770968536542737664556989905496805704049016902548788416305308855845512750561201497285138958799639556917329743854852757833398750287032452447471806697716960120938052786185969309569328399422236173121744750597908228580568696701428275744904536535057386599041670074204360873447700217551222215475730279184683100011528599893459247209092212018636949717147139273475811403154630662174329155165297132364940611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							80fceed920e81388b133f8911781f8bc33743220
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.kgs.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fbc5372970000040300483046022100a8e8652d1c820455fcc40e8b7ba44d3719ee85d43a3ba5358698d3c965c10ae1022100a647a60123d94270ee97fe6e3de1a4e5a5d3b497b271c41bfa7f1e551595aef2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fbc5372880000040300483046022100912b8373eb72ff8e4ae277ecfba4cb9896ddf6ef930cd70e02f763c2f801e8b4022100e5b369ff03851a9dd199c5db435b99b05d7396ed163e5d016487ace30ffbbc1d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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