cpcontacts.devyz.co

Issued by R3

About this certificate

This digital certificate with serial number 04:77:ba:c4:3e:1e:c3:ad:2c:23:6a:52:91:0c:30:02:65:ec was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cpcontacts.devyz.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:77:ba:c4:3e:1e:c3:ad:2c:23:6a:52:91:0c:30:02:65:ec
Serial Number (int): 389191000747979730148563351051030057084396
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a9:62:7c:94:5f:f6:4e:4b:3d:a2:21:e5:e9:84:83:3c:63:5a:6d:a6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 17:22:6f:9a:aa:00:d0:da:b2:f5:64:9a:ff:89:8f:b6:cf:49:71:bc
Fingerprint (sha256): 0d:53:00:a7:60:2d:36:b2:45:2b:65:25:19:73:73:97:3b:56:2a:40:8a:06:17:f8:77:ce:dd:32:33:6f:da:63

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cpcontacts.devyz.co

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cpcontacts.devyz.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.devyz.co
autodiscover.thecodex.us
cpanel.devyz.co
cpanel.thecodex.us
cpcalendars.devyz.co
cpcalendars.thecodex.us
cpcontacts.devyz.co
cpcontacts.thecodex.us
devyz-co.jonathanbosley.com
devyz.co
mail.devyz.co
mail.thecodex.us
thecodex-us.jonathanbosley.com
thecodex.us
webdisk.devyz.co
webdisk.thecodex.us
webmail.devyz.co
webmail.thecodex.us
www.devyz-co.jonathanbosley.com
www.devyz.co
www.thecodex-us.jonathanbosley.com
www.thecodex.us

Other certificates including the domain name devyz.co

(limited to 100 certificates)
jonathanbosley.com
cpcontacts.devyz.co
spacedmanthemovie.com
pocket-analytics.us
devyz.co
leecates.com
bik.kr
bik.kr
devyz.co
devyz.co
bik.kr
smith.jonathanbosley.com

Certificate

The complete raw certificate details for cpcontacts.devyz.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQUpK8iHXRXSIT+RQi2N
e4Q4todQ6+FWDwCRRwkcMDwwTlC3CaR63+hcCUa9WwSf7DJw2IWBlXDzzLMaNISc
Zw7AyLEFooS8GpuS3Y227bh47RlBHjOrysoWvGDMEsBLXdUujHdH32hWlENYh9PI
Cao/lukKlpsMSaL5y0iXvQTYAiosoGzbPUPEjGcLW0Oe59tK/bQytr5bagkzJGko
kSQr1xWWmfTw0prbF7vMMcwtBuMtxGLMySls3G6CoTq6Z1hCtoZJlypR/SmaV2FW
sjpx9z0Wqlf1LYJ6z86LJMVJeF5MrAV894Eeamt81oiwc8WnRCymme2N1WnbemFD
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389191000747979730148563351051030057084396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 14:17:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-22 14:17:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpcontacts.devyz.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22346724876319306571476501540667027041346275776565489788919123871785781594260649349426809788025994162552112662739813064236339041332611046261429731998452480353519229975366273558641984671741547215881263124168708385321217365793755783571220976727804670241331067759423519268423412697061308105658701087538948838701377602436031303147788077143739669684198242019208508454760606850098859715051844515053061499602683258134861145651680179368223534247237156241376919959779512233793092877958605807824462413199566080737360329588796692822668092677451718102208572854486678405645982186939365307516683623979400199005058401465293984580497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9627c945ff64e4b3da221e5e984833c635a6da6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (477 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.devyz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.thecodex.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.devyz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.thecodex.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.devyz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.thecodex.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.devyz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.thecodex.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devyz-co.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devyz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.devyz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.thecodex.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecodex-us.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecodex.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.devyz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.thecodex.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.devyz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.thecodex.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devyz-co.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devyz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecodex-us.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecodex.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f0b88feb9000004030047304502202309455818d1f8167c3eaff0be4738fe1f99632ece203a0fe796d073538608d10221009aefb16eefa7b93c7c846c86465071cf611442ee84abc8ffb146071a6d16522b00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f0b88fee2000004030047304502202b8f720c817c91e71efb07f006b36bbd4decb7172502d252761a73009fced4d7022100f04ef984e572afa0e498991fa33571f12c3c7e6db4af8d8745aca1cd74ba41ba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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