frewitt.com

Issued by R3

About this certificate

This digital certificate with serial number 03:9b:f0:a6:b6:69:f6:2e:18:83:fb:b7:68:7a:e8:d6:a1:a4 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=frewitt.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:9b:f0:a6:b6:69:f6:2e:18:83:fb:b7:68:7a:e8:d6:a1:a4
Serial Number (int): 314400505008086792334954995325378969903524
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fb:c0:1e:9c:61:80:d8:e4:4e:2e:df:3a:d2:d1:76:83:b5:1b:de:e6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 27:0c:1a:04:be:f1:d9:3d:a5:45:3a:c3:9b:aa:a2:2a:05:2c:96:33
Fingerprint (sha256): 11:e1:1b:82:29:fd:c2:03:65:b4:45:ea:df:1c:24:53:98:af:de:17:2e:43:8d:37:17:e7:d9:0e:61:46:52:06

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate frewitt.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for frewitt.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

frewitt-usa.com
frewitt.com
www.frewitt-usa.com
www.frewitt.com

Other certificates including the domain name frewitt.com

(limited to 100 certificates)
servicedesk.monaghancoco.ie
sdp.hja.net
frewitt.com
servicedesk.monaghancoco.ie
support.bong.com.pl
helpdesk.porvairfiltration.com
help.kellysupport.ru
helpdesk.llyc.global
activesync.portal4you.ch
itsupport.bandmwaste.com
frewitt.com
servicedesk.collen.com
frewitt.com
frewitt.com
helpdesk.alivetravel.com
itassist.harrowschool.org.uk
helpdesk.commit.fi
servicedesk.monaghancoco.ie
ictservicedesk.bield.co.uk
servicedesk.monaghancoco.ie
help.thereader.org.uk
servicedesk.buildmat.eu
frewitt.com
servicedesk.monaghancoco.ie
pomoc.lekam.pl
*.frewitt.com
servicedesk.endrich.com
servicedesk.moredun.ac.uk
servicedesk.ambient.org.uk
itservicedesk.zedra.com
itservicedesk.emhartglass.com
itsupport.bhtc.com
servicedesk.monaghancoco.ie
safewalk.portal4you.ch
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
itsupport.bandmwaste.com
itservicedesk.zedra.com
servicedesk.monaghancoco.ie
ictservicedesk.bield.co.uk
itservicedesk.emhartglass.com
servicedesk.endrich.com
hrdemo.servicedeskplus.nl
service-desk.bedfordgirlsschool.co.uk
servicedesk.ambient.org.uk
activesync.portal4you.ch
servicedesk.durbinglobal.com
sec.frewitt.com
servicedesk.grupaeurocash.pl
helpdesk.greenfood.nl
newservicedesk.mi-hub.co.uk
servicedesk.labbuit.it
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
pomoc.lekam.pl
help.thereader.org.uk
servicedesk.monaghancoco.ie
helpdesk.cartrawler.com
itservices.tecpartnership.ac.uk
*.frewitt.com
*.frewitt.com
sd.kormotech.com
helpdesk.milkrite-interpuls.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
helpdesk.frostkrone.de
ithelpdesk.ocugroup.com
helpdesk.nauit.lt
ithelpdesk.ocugroup.com
servicedesk.tms-cardiffgas.com
frewitt.com
crm.frewitt.com
help.sch1584.ru
itassist.harrowschool.org.uk
servicedesk.monaghancoco.ie
itservice.roxcel.com
servicedesk.endrich.com
servicedesk.ambient.org.uk
helpdesk.cysec.gov.cy
support.servicesforeducation.co.uk
servicedesk.lumanity.com
helpdesk.milkrite-interpuls.com
itsupport.actibel.be
servicedesk.mi-hub.co.uk
helpdesk.greenfood.nl
helpdesk.mawdsleys.co.uk
servicedesk.durbinglobal.com
servicedesk.monaghancoco.ie
itdesk.solargis.com
helpdesk.frewitt.com
it.5.sm.urusai.fun
*.frewitt.com
helpdesk.thermegroup.com
servicedesk.maccresi.com
helpdesk.vandenbraembussche.be
itsupport.bhtc.com
helpdesk.nauit.lt
support.sysco.uk.com

Certificate

The complete raw certificate details for frewitt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314400505008086792334954995325378969903524
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 07:54:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-14 07:54:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'frewitt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4892796326872552023034183116404656044681309823917930848866588376696708117077881854819909267249925849813522303931558763771287703568023515704355839399282762241833528442518076248062959960470232386952707660139262413137683909278038697833673719198268776449690875350112701213770486057618087351234559242810494869428471168931470326526587861394041659271048096018492242170713937183289887241913014102324676494273535645350708663197171376444658663860335770384872987669639673000962767188172587879458176797089336412552782038839332254521575546812354816164730670817521968109121831321074366882090953039506058922677627078665102832925249335867770045443822479685564716001633104182264189349261991265341046820240069800491971253336358626356509132818913378591012794355679233707739303778277405610110265702785236590361465922602044982392324978012522234443590828340309477693332998585667706818626123312028930282460483031268026869306025614186104202040422811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fbc01e9c6180d8e44e2edf3ad2d17683b51bdee6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frewitt-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frewitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frewitt-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frewitt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f809bca0f0000040300473045022100a37677dc39b5d1e55dcbd8e7b57dca93250ecd565596fe33af19ca41007a473a02207cddb7073a13d21d9016f80657c5f6e84c18706f1f7d3441c0d995a7127ba54e007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f809bcb0c0000040300473045022100c11d2e8fe99efe8ec166e9fbfb7545030b0644fb0080a25870b8316796a42853022030cf3aa3ba67f1c42b05b21fbd13cdfc1a261efb314e67f56a97570b34b27bcc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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