precisepresentations.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:34:92:18:9f:23:3c:f5:96:57:a0:98:8b:8e:95:fa:b2:39 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=precisepresentations.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:34:92:18:9f:23:3c:f5:96:57:a0:98:8b:8e:95:fa:b2:39
Serial Number (int): 279225736005373721259275565485967606985273
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7b:da:2f:fc:01:30:a4:11:3d:fb:4d:f4:ad:11:5a:10:c3:8b:12:d1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 83:9a:b7:d9:ba:05:b5:63:4a:0c:6a:3b:9c:7d:5d:5b:6f:3b:23:14
Fingerprint (sha256): 01:2b:48:4a:98:74:b6:cc:9b:3b:43:93:b6:08:02:07:33:02:c9:28:98:87:f9:e4:39:88:b7:b3:6d:be:17:d7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate precisepresentations.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for precisepresentations.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.enterprisecoach.co.uk
autodiscover.precisepresentations.com
cpanel.enterprisecoach.co.uk
cpanel.precisepresentations.com
enterprisecoach.co.uk
enterprisecoach.tsar.on-rev.com
mail.enterprisecoach.co.uk
mail.precisepresentations.com
precisepresentations.com
precisepresentations.tsar.on-rev.com
webdisk.enterprisecoach.co.uk
webdisk.precisepresentations.com
webmail.enterprisecoach.co.uk
webmail.precisepresentations.com
www.enterprisecoach.co.uk
www.enterprisecoach.tsar.on-rev.com
www.precisepresentations.com
www.precisepresentations.tsar.on-rev.com

Other certificates including the domain name precisepresentations.com

(limited to 100 certificates)
precisepresentations.com
trainingoutofthebox.com
precisepresentations.com
fastwp.co.uk
precisepresentations.com
precisepresentations.com

Certificate

The complete raw certificate details for precisepresentations.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTAhX4cw7jDmkru1UtZO
Gd45c9+FpRFwPbdzRBh3nm0BTpwiDK/IPVYyzVXLzzZV+DhOKNkvwcS+cqEjyHCA
3vaC/qa0SHoIES3Ctrlef1L+/RccvggoFxrIBxO79qwKWeeTyXSVHVyK4jDLxx3b
/q4OOMv4Bp04N60GkBs3EGNPEPZxhLl9n5K/MpwXKVWiokT/sEVlgU81hxDGRECH
Z2eXxh+aX3wHVnLwLBYYUAvf31UWw7yHJ0NbJ16va1fXyRIkNnIwYW3avfrIlfRF
6ZtLC/LoPITLcqbsUcfz+gNhbiKh6WFk7sFh4lP4x9M7UN3fAvi/mPCHrJ5MGcTE
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279225736005373721259275565485967606985273
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-21 10:45:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-19 10:45:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'precisepresentations.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25397633265190476228912532312227197395576962717862210089065875060174877367930151165263204644373242200760260029984119967473188302986855711085474166530093724060102465214024586932562602206040127110319616130624507625301898014830097915763006380735929562774788260876541125492281051025866934079507395951143449444243618088255375082545804600121984343524471839878490243609741791580394239876180700291385207275794381497050531149312836469229724389170237609579708795131317117623939540735845753886302136098598927689636999390902959205320594113989262384335133000552508112092995547660260334514712530834155507192539530368949230663681207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7bda2ffc0130a4113dfb4df4ad115a10c38b12d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (587 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.enterprisecoach.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.precisepresentations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.enterprisecoach.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.precisepresentations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprisecoach.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprisecoach.tsar.on-rev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.enterprisecoach.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.precisepresentations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precisepresentations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precisepresentations.tsar.on-rev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.enterprisecoach.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.precisepresentations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.enterprisecoach.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.precisepresentations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enterprisecoach.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enterprisecoach.tsar.on-rev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.precisepresentations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.precisepresentations.tsar.on-rev.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001673616a2c900000403004630440220610e47608c37e837ec47a0daa27812739d7755a167d022f95c5213a5e48769a4022059781b479894a15bc7edc90bf8cf34a926c91aad9917e743bcc4d392d589ac4100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001673616a2cc00000403004730450220078068948519c8db9458ae0ca26f0666426d7e43f95c143d33f3214c58394814022100c03b2bb8691b99c69f53437f35885fecccb46f940cbc2c1b40358c54d52c7343
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005c6b96f69bedb16f3b48189bc2f36ef30314dcb8dc1471bac5f1568e0a1321a0a16ac6c42054c1d3eaa78c9d6386233c33a02dd1dc4344d4a824411efc9c2feaebb89261ebe60ef4a37c2282269c9ba2b44b1476f28a41727515f16b9d4d5f1c7bd5ab484d957cbdc4e644776b4216e32f578b389728b0e73a35cc57e7e87f98854fb483d7cd8e6e0b7633af4c3d7026850dd8f36013c8c87e1d8033c61dfb4d248cbc59305abe4bd81e45f09efeba5688bc63715df93bfa404ed1373d6cd080cca91c2f3ce3c8538f6b48b4864f639b5da11463930b31bdb2c6947fafd0b01abd363f00f2908f4532a329c551a4d7521dca5e99e7317521540d97c7875f4bde