www.itv-entertainment.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d0:b4:22:d1:62:49:f0:96:e7:9f:49:49:e9:cf:44:19:7c was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.itv-entertainment.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d0:b4:22:d1:62:49:f0:96:e7:9f:49:49:e9:cf:44:19:7c
Serial Number (int): 419467317870741512378277909151693328882044
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 18:36:0c:97:46:b3:92:a3:f7:c3:7d:ef:b4:b4:b4:42:d5:f6:4d:d8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5b:b9:85:dc:e9:8b:cd:08:3e:15:1d:6d:93:59:43:4d:e1:c9:f0:dc
Fingerprint (sha256): 1d:46:36:5f:a9:72:71:ef:34:98:c6:fa:1f:31:79:70:08:78:0f:d1:9a:bc:27:2e:a3:28:8a:9e:22:39:12:75

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.itv-entertainment.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.itv-entertainment.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

itv-entertainment.com
itv-entertainment.leftfield-entertainment.com
mail.itv-entertainment.com
sire.leftfield-entertainment.com
sirensmedia.com
www.itv-entertainment.com
www.itv-entertainment.leftfield-entertainment.com
www.sire.leftfield-entertainment.com
www.sirensmedia.com

Other certificates including the domain name itv-entertainment.com

(limited to 100 certificates)
itv-entertainment.com
www.itv-entertainment.com
www.itv-entertainment.com
itv-entertainment.com
sirensmedia.com
itv-entertainment.com
itv-entertainment.com
itv-entertainment.com
mail.itv-entertainment.com
itv-entertainment.com
mail.itv-entertainment.com
itv-entertainment.com

Certificate

The complete raw certificate details for www.itv-entertainment.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApngJnYovh7G80yUdZ7o+
eD52sti4OBFBBtSwahlAQOgsVAmYMKzL+3+AgfbsWGQjxOst/Omz5JY4aMuqzzDt
4SuyePbAijvyqRHgyRk53r4I6OG5wH37VcN1t49SqZ+Lw/KG78K6fMFNRn1PzUjJ
oUj5vjH/haEriHIUaiu8LgH/jrJlBujLmrFYdsQE++ac1A+4SiRg2q1UqyLmNrpC
QsIcIiQOnYtAiQ2ydgqa508Gnwk6K6B4KPWvxClBfjqLQ21a2cQ5cWJwnOj1XP1C
3Y1jRhgZ4nBJexf5cBBZqTNr27IsCfViigJs2gwuqA8w0t9ZOOB99zYdwFyl1DDD
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419467317870741512378277909151693328882044
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-24 12:13:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-23 12:13:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.itv-entertainment.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21014751351402272183574224566985583489402556291617716605583700128411530240467564534679046207466293936258862784375133782413594556187336999105262183442683377498283246912134012932424739622294710658778546206507751388260211440285784148798570550828865292761758049416990546550227129848990404611657666902123016073603691848046327364455139496546139420803075097443839978547831293199773560905843309197923718876004832509653155862195203980349483362757133053253392586878911347987246906051621555226819872588946435833949789167349164891753311973760154385362143977515140957882791625535980035103363195221972261011675610761369795391701783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18360c9746b392a3f7c37defb4b4b442d5f64dd8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (290 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itv-entertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itv-entertainment.leftfield-entertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.itv-entertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sire.leftfield-entertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sirensmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itv-entertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itv-entertainment.leftfield-entertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sire.leftfield-entertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sirensmedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187b36617b00000040300463044022000937da2673d1e6b24dea17c6f7ae66f3a60e3147503d757cc3f7fa9e98786be02203da3cefc662d2a13e5d408d03fab4d592a8e30464cc94b050f7dcb21a972e76b007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187b36617ab000004030046304402201ff3932286c8b3b0581c9d4cd68c904a35214a1a117445ac1c3495883ff6c78d022010cbc454d51b08bd8aec34e898ef5ed58c2f614278a9a74f6b7edad704b5460f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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