DV SSL/TLS Certificate for brandnewgroove.co.uk

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the brandnewgroove.co.uk DV SSL/TLS Certificate

This certificate with serial number 06:6e:7d:bf:21:01:04:d4:aa:01:4c:a4:2f:c2:c2:d9:4d:d1 for brandnewgroove.co.uk was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for brandnewgroove.co.uk provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:6e:7d:bf:21:01:04:d4:aa:01:4c:a4:2f:c2:c2:d9:4d:d1
Serial Number (int): 560271921849438045615063332473007171522001
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: e8:2d:d1:77:40:6f:e5:53:d9:0a:d5:4f:70:d6:b7:1a:fa:64:78:e3
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): a2:96:a5:8e:9a:d6:32:76:34:e2:7b:b0:d9:40:92:4d:a9:7c:2f:7e
Fingerprint (SHA-256): e1:8d:a2:03:fc:57:c3:a2:38:33:1a:34:38:fa:b2:12:84:3b:41:93:1a:eb:4f:38:b6:27:a3:19:cc:2a:e2:46

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/82.crl

Check the revocation status for certificate brandnewgroove.co.uk
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for brandnewgroove.co.uk

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for brandnewgroove.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIgMW52jkbmQm5ttT5l/
fisoY28pQIVSykVyJnsJskY3vpG6mKuVI7oVNm5B5lrqou5BzeNQeBwmSBWgRS0X
NmK1GmEJO60iLO4lMGeK41XbSb0/UuD9hGBK8Z43Dy7gIdcQUqgXN5v4V8PUZ/h+
Jk2D7JCvdn8OhQ+RrwB1EMGWHsMREh1lA7J2pVzp+NL8l+zyXnMkZ9t4sP6NV8GO
x8NzwQy/lHvntfabe+RhdqDS/8Trz4NyGDEbBHc7TWIcXCHM4VvU3wanrZM+uEtn
hJ+xQk4n7UXmwqotmBW+QbyVx5EjCmy7u9O2vKrrc2cZOrTfSA7w6+0EhKw1fvtx
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 560271921849438045615063332473007171522001
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-10 04:31:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-10-08 04:31:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brandnewgroove.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25314748897001723423083799677631116143678652684100209298055647791280341693094000993709588886133924953370016565385193772263086108093267247384543587513659524712563976490405458300274796151256246233568688227738209931181361292963621612174512087274357957313109524643159797161296710675036128028459789120885042366877892010968532024484322415087822930208432511573193062225064853142468791829014629696944646076992439960201508558874768480091395868721936495537403703588717400715777954120111181151388920645236851516208646248180683936313101480819874874155556131142274693514794814898152920075028860981667389745075684106684226873291157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e82dd177406fe553d90ad54f70d6b71afa6478e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandnewgroove.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandnewgroove.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/82.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a845400000197f2cfec280000040300463044022076e1e161868c15c757a005634bb957f69871fa078b6a527f39e996070198975f02207aea7a46b1f091885fae29536ce7b0b42a26eddc0c38cdfb164146a4f0d93498007700dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a00000197f2cff45f000004030048304602210089d6e34f25c3aced144fa7a9e36cc705da1de2af8bec10cd97d7b42ea6ecd94c022100bc8d9c4da1233d4480119d4a5be52a9097e1252434940e2a61a825e2bab4d67b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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