magictorch.me.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a0:fc:65:7d:3a:1c:3f:15:94:ee:a0:f7:0e:dc:e4:ec:9c was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=magictorch.me.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a0:fc:65:7d:3a:1c:3f:15:94:ee:a0:f7:0e:dc:e4:ec:9c
Serial Number (int): 316117528919456580638378653891587129797788
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4f:9f:1d:dd:de:a0:e9:c6:fd:fe:0d:9d:9c:47:10:25:e5:c8:27:68
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d7:d0:46:c4:80:5d:df:d5:8c:15:a8:27:c7:7b:94:e3:dd:ed:82:37
Fingerprint (sha256): 00:a4:03:27:85:5a:96:82:1d:8d:43:78:8e:94:e7:2c:26:d3:c1:93:57:fb:8b:62:4e:f0:5c:60:bc:05:57:68

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate magictorch.me.uk

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magictorch.me.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.magictorch.me.uk
cpanel.magictorch.me.uk
magictorch.me.uk
magictorch.me.uk.symiart.com
magictorch.symiart.com
mail.magictorch.me.uk
webdisk.magictorch.me.uk
webmail.magictorch.me.uk
www.magictorch.me.uk
www.magictorch.me.uk.symiart.com
www.magictorch.symiart.com

Other certificates including the domain name magictorch.me.uk

(limited to 100 certificates)
magictorch.me.uk
thejcafeportland.com
magictorch.me.uk
magictorch.me.uk
*.symivillagalanis.com
www.oregonconventioncafe.symiart.com
magictorch.me.uk
magictorch.me.uk
magictorch.me.uk
www.magictorch.symiart.com

Certificate

The complete raw certificate details for magictorch.me.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyikAALCwLWIQuLM3b2KV
lsxqekz1JVrJxKDG8efoRYHKzETO22FCeX/R9lmJOff0UDvshUQ6spZH36plKsPu
llbpb4+RG1hq/YY4VPx+2lQJ8ZTfQ5+GV6/hDPZjSb9unR1JCyL8uP00a9oQcjsP
q3MxVX6cSotT2RK53ED+hFUnE4gAPtKk9TcqoyoqGT6Nd1ZO9HPCssMma0ZwDDxA
JBj1owqYRjxNBiAD/LbmLCzTpPrJJQZ6N+YsW5H9NW2Yi5xsbVBFWT27yVfTPedi
ZF0qML0YI5CeucTCKNUT/PKZJw2mGFirv0FJeYEQE7LPZ1uh6GYRqy3+dH2+X4tR
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316117528919456580638378653891587129797788
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 03:49:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-29 03:49:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magictorch.me.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25520355461866807139093850369606272557014628482112999982726243509791323436132337455074206635472907930196927444429902433037248139240341719894691361540489349977717773955509866416382768722113397142823216041343436624526349323475834289843468766414516763779030251364924874252248456594478554122377654573376219804578162350669541349726501009859782913814191594452641833467029044356129744382630257162151682277726046303725375513259837049895985394064162195321695989026288163302172154690728896129957606137254544170598705521444688369779398202659408339025068434940840661268135420414098881601878909027069817618098241743634718907912537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f9f1ddddea0e9c6fdfe0d9d9c471025e5c82768
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (291 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.magictorch.me.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.magictorch.me.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magictorch.me.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magictorch.me.uk.symiart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magictorch.symiart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.magictorch.me.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.magictorch.me.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.magictorch.me.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magictorch.me.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magictorch.me.uk.symiart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magictorch.symiart.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001712eec288d0000040300483046022100ca524ca8ea7993a0f11afe5600ba05387c45d4a46c41bdc334030374fa14fc0f022100b03ef223aace1f818a760f5113f34a9f0950e93253904ec6b14ce5e47bb7cf130076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001712eec28a000000403004730450221008d7b3772b1a060308b81f847861d1d094264c8fd7cdf47e157caa12726fb578102206735a1144f12d3fecf4db2b133f24047c5775b9afec29669d9a7ac0333c35922
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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