vademecum.cantabrialabs.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d9:80:46:57:a9:ec:2b:b3:ac:e1:0c:2d:7d:91:04:52:18 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vademecum.cantabrialabs.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d9:80:46:57:a9:ec:2b:b3:ac:e1:0c:2d:7d:91:04:52:18
Serial Number (int): 422460923771157486104940309863996747698712
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 60:1d:6b:60:c4:52:44:0c:3a:a1:16:56:1d:68:25:23:b9:d6:b4:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3d:3f:be:80:cc:e1:cb:ad:2b:eb:60:7c:a5:da:02:fc:7b:55:51:69
Fingerprint (sha256): 06:2c:c5:70:bd:32:ee:a7:b7:fe:3d:bf:ef:fb:7e:c4:ed:90:d9:7f:8b:c6:d3:0c:9e:73:88:3e:9a:4b:75:f0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate vademecum.cantabrialabs.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vademecum.cantabrialabs.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vademecum.cantabrialabs.com

Other certificates including the domain name cantabrialabs.com

(limited to 100 certificates)
www.cantabrialabs.com
service.augustusmartin.co.uk
vademecum.cantabrialabs.com
*.cantabrialabs.com
dossier.cantabrialabs.com
dossier.cantabrialabs.com
vademecum.cantabrialabs.com
hub.cantabrialabs.com
dossier.cantabrialabs.com
vademecum.cantabrialabs.com
productinfo.cantabrialabs.com
jobs.cantabrialabs.com
ithelp.mjevansgroup.co.uk
hub.cantabrialabs.com
dossier.cantabrialabs.com
service.augustusmartin.co.uk
service.augustusmartin.co.uk
hub.cantabrialabs.com
www.cantabrialabs.com
hub.cantabrialabs.com
service.augustusmartin.co.uk
vademecum.cantabrialabs.com
vademecum.cantabrialabs.com
productinfo.cantabrialabs.com
hub.cantabrialabs.com
dossier.cantabrialabs.com
helpdesk.ebusco.com
vademecum.cantabrialabs.com
jobs.cantabrialabs.com
*.cantabrialabs.com
jobs.cantabrialabs.com
helpdesk.bettybarclay.com
jobs.cantabrialabs.com
servicedesk.mvhomes.org.uk
support.cantabrialabs.com
jobs.cantabrialabs.com
mas.aleaticalabs.com
helpdesk.groupe-r.ch
cantabrialabs.com
service.augustusmartin.co.uk
productinfo.cantabrialabs.com
support.oprisk.hu
jobs.cantabrialabs.com
jobs.cantabrialabs.com
jobs.cantabrialabs.com
vademecum.cantabrialabs.com
service.augustusmartin.co.uk
hub.cantabrialabs.com
vademecum.cantabrialabs.com
dossier.cantabrialabs.com
dossier.cantabrialabs.com
jobs.cantabrialabs.com
service.augustusmartin.co.uk
servicedesk.mvhomes.org.uk
jobs.cantabrialabs.com
productinfo.cantabrialabs.com
dossier.cantabrialabs.com
infocare.cantabrialabs.com
hub.cantabrialabs.com
productinfo.cantabrialabs.com
dossier.cantabrialabs.com
hub.cantabrialabs.com
hub.cantabrialabs.com
jobs.cantabrialabs.com
dossier.cantabrialabs.com
jobs.cantabrialabs.com
helpdesk.prosapient.com
help.amiculum.biz
helpdesk.ebusco.com
productinfo.cantabrialabs.com
dossier.cantabrialabs.com
productinfo.cantabrialabs.com
support.cantabrialabs.com
dossier.cantabrialabs.com
dossier.cantabrialabs.com
service.augustusmartin.co.uk
hub.cantabrialabs.com
jobs.cantabrialabs.com
jobs.cantabrialabs.com
infocare.cantabrialabs.com
support.oprisk.hu
qrinfo.cantabrialabs.com
productinfo.cantabrialabs.com
hub.cantabrialabs.com
dossier.cantabrialabs.com
service.augustusmartin.co.uk
hub.cantabrialabs.com
helpdesk.groupe-r.ch
productinfo.cantabrialabs.com
helpdesk.ebusco.com
www.cantabrialabs.com
hub.cantabrialabs.com
jobs.cantabrialabs.com
hub.cantabrialabs.com
hub.cantabrialabs.com
productinfo.cantabrialabs.com
productinfo.cantabrialabs.com
hub.cantabrialabs.com
jobs.cantabrialabs.com
hub.cantabrialabs.com

Certificate

The complete raw certificate details for vademecum.cantabrialabs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422460923771157486104940309863996747698712
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-12 08:47:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-13 08:47:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vademecum.cantabrialabs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 707335172793011586881749126187102603926450922416919677165312436766658875075001726281452801070118156646586264955024385992156081081277006167571344160376201855862757635037136755327573338142459968481776785895433964279802233123746020218048209990802874653361372474502474574670904351117080389905174747945164925660912191585618710809478748509806341421477793348766968320600285921893809061814226499073948436685824148904372145964902750362993696556779361122212919777143154894948413850093737637430562774577148125915208909023829156642109190800134393239493223795589445989191909948817997185506196938781311099869948016503083785611409400520119328345983683661272735576834969216320361629244740347461221326938431854220406769811368162662156890743116828996865821231199898743030040776591579186058252164365778135664571725980271892641870642933735427634027577619656207627255292698076743165737666526497427137386223810158894708324720568313946511149610957525389003601505768275818780515293307627639775942091469361041344741137140847823307420080049860758839183501137935085726055368444301526064351747237406791988294968452883200172915534168801666343517806450420075434293716661816083163396928026412383305449961187232643602572857336765281068080223698611073953030019291739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							601d6b60c452440c3aa116561d682523b9d6b468
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vademecum.cantabrialabs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b7ff4ed58f8378b9908b390f627ab29edfa311ca054fb8d9a86350b9f7a0501b966cdb49413dbd18d263b5928c3e2d079e099dab6c1a52046a438fa9d2732bb644a7b8db287791e807ead602c3712a747136e9aeaddfe33f30507dccfc49172e765e95b731eb18a569f963d60b008510568cedcc5299abe3964164f7bc22aa3a4faf93a70eea1a72b16b57d5941c36cf4d12f3453333746060577eed81220086541a6da0dd9b182f80f812fa230c2707092412fde2f0c6eccc64a04ec7c895a81a907c905e5bbfa7c0ce4c8bea90dba830046ee71a14e3139e80261cc0678ecfd3e6260f2a88a71f9e3e3b8496843b374483f378c2b138f5d97929f101c2fbc3