mmm.itpro.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:08:10:6c:08:79:6e:63:a0:15:3e:df:77:72:93:ad:cd:07 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mmm.itpro.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:08:10:6c:08:79:6e:63:a0:15:3e:df:77:72:93:ad:cd:07
Serial Number (int): 264080945318521576347075424975640303881479
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5f:b4:e9:92:1e:d3:0b:fb:a4:8e:de:b8:7c:da:b4:60:a9:c5:fd:88
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8d:94:e9:eb:06:79:22:3d:18:a0:aa:31:6c:25:bd:29:fc:4c:b9:6b
Fingerprint (sha256): 0f:13:2a:d1:28:0e:89:e9:89:56:d0:12:5b:4a:69:d2:56:4f:75:4b:29:b6:bf:d9:ba:3c:56:13:c0:fb:61:bc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mmm.itpro.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mmm.itpro.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mmm.itpro.co.uk

Other certificates including the domain name itpro.co.uk

(limited to 100 certificates)
aex-mms.autoexpress.co.uk
mmm.itpro.co.uk
aex-mms.autoexpress.co.uk
s2-san.cloudinary.com
aex-mms.autoexpress.co.uk
s3-cloudinary-pin.map.fastly.net
s3-cloudinary-pin.map.fastly.net
derstandard-spat.derstandard.at
s3-cloudinary-pin.map.fastly.net
s3-cloudinary-pin.map.fastly.net
*.pinterestceros.com
s3-cloudinary-pin.map.fastly.net
r626.womanandhome.com
z980.carthrottle.com
s2-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
s2-san.cloudinary.com
www.itpro.co.uk
s2-san.cloudinary.com
ceros3.map.fastly.net
derstandard-spat.derstandard.at
aex-mms.autoexpress.co.uk
ceros3.map.fastly.net
ceros3.map.fastly.net
ceros3.map.fastly.net
s3-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
*.pinterestceros.com
aex-mms.autoexpress.co.uk
s3-san.cloudinary.com
aex-mms.autoexpress.co.uk
mmm.itpro.co.uk
s3-cloudinary-pin.map.fastly.net
derstandard-spat.derstandard.at
s3-san.cloudinary.com
s2-san.cloudinary.com
s2-san.cloudinary.com
graphql.autoexpress.co.uk
s3-cloudinary-pin.map.fastly.net
s3-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
mmm.itpro.co.uk
ceros3.map.fastly.net
s3-cloudinary-pin.map.fastly.net
s3-cloudinary-pin.map.fastly.net
s3-cloudinary-pin.map.fastly.net
tw-mms.theweek.com
s2-san.cloudinary.com
mmm.itpro.co.uk
derstandard-spat.derstandard.at
s2-san.cloudinary.com
aex-mms.autoexpress.co.uk
a.hwstatic.com
auth.autoexpress.co.uk
s3-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
itpro.co.uk
s3-san.cloudinary.com
s3-san.cloudinary.com
*.pcpro.co.uk
auth.alphr.com
s2-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
aex-mms.autoexpress.co.uk
s2-san.cloudinary.com
auth.alphr.com
s2-san.cloudinary.com
s3-san.cloudinary.com
s3-san.cloudinary.com
s2-san.cloudinary.com
s2-san.cloudinary.com
itpro.co.uk
s3-cloudinary-pin.map.fastly.net
aex-mms.autoexpress.co.uk
ceros3.map.fastly.net
s3-cloudinary-pin.map.fastly.net
s2-san.cloudinary.com
ceros3.map.fastly.net
derstandard-spat.derstandard.at
mmm.itpro.co.uk
aex-mms.autoexpress.co.uk
t075.itpro.co.uk
s2-san.cloudinary.com
itpro.co.uk
s3-cloudinary-pin.map.fastly.net
s2-san.cloudinary.com
s2-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
ceros3.map.fastly.net
s3-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
s2-san.cloudinary.com
mmm.itpro.co.uk
s3-cloudinary-pin.map.fastly.net
derstandard-spat.derstandard.at
s3-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
itpro.co.uk
s2-san.cloudinary.com
s2-san.cloudinary.com

Certificate

The complete raw certificate details for mmm.itpro.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5N+mBc0vECBn62TYqFE
SIIwQP4+GSCGM5eiPVbcy5vs/4dP+jk4E4eWZeMW6GgfGLKqWgTQtsMfzrDuHwlJ
pVJxV6EkeO9GhKDYm/g/p2vZF/VShRJwhzpAa7mQEqtYJxlnV3WKQYpRv0OYOtNA
tWJXYX1xdg4olFvZJ3pXno16eopd2r+zEStZJjkT/CF278b+y7Yaa6Ctduh6vrxa
vMbWVGjpza50g0zFSnn61Wy13vDK6NFQ60o1E/7AuserlBk23qslzeYngFp1M6Wz
5oePqTCD5I83kXVpU/Og8iggaXyFeA87B0g3tCK7x1u1e5s/7jul07SSiyCgWzFD
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264080945318521576347075424975640303881479
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-18 17:07:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-16 17:07:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mmm.itpro.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19639669522510119483439465058545170857951161676251179651102523304418110805576639135319151138751443978806912536379363950712108901565995847497230492587764703390049178505555613267415783757508262280969931456084657135885232977393858835661287963448575117749637553632133405744287034469348190700479841315455015237911572806049548204559402686342092159029837434886592007406474615191401811257417327769108576297418696444413939960084910197093745098211135393240496400240381842358749469245110739907793173471467740767995654449789909987842540108234581973470707663462055417245250063202048503713648743860587039329950375855225819414741783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5fb4e9921ed30bfba48edeb87cdab460a9c5fd88
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmm.itpro.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164ae9314120000040300463044021f7848893843b4d086e658c60c508ebb2dc0f6b5d4084df4a7432d6f294d703d022100a1b90922cc8285a91d1b7c38abfa45fa48b2fb9431fdfa2d5475e07ca6a8794b0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000164ae9314e60000040300473045022100d3199c0e86eb1fd2559ecf0a96bf7f2324ba24604ede54e66f45007124ce59d502200e034d2da0d9db1486e29a10a94dc5227de9eb875cf8e8aac71d141f13fbb0d5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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