mfe03.iptv.beanfield.com

Issued by R3

About this certificate

This digital certificate with serial number 03:9d:8d:a9:41:fd:95:db:b1:61:32:04:a5:f3:31:82:ca:41 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mfe03.iptv.beanfield.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9d:8d:a9:41:fd:95:db:b1:61:32:04:a5:f3:31:82:ca:41
Serial Number (int): 314949489385890572439907307141674727295553
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4e:b3:76:f6:7a:a7:93:83:cc:ed:8e:f3:20:f8:cb:f7:a5:b4:a8:16
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 70:09:3e:58:09:31:a3:ea:fd:69:31:d3:1e:03:46:00:b9:d9:90:18
Fingerprint (sha256): 39:8c:ff:6b:08:96:c7:f6:47:86:e0:45:66:fc:47:37:e8:97:73:fd:c4:c1:13:4b:e3:62:ce:ea:98:1a:ad:03

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mfe03.iptv.beanfield.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mfe03.iptv.beanfield.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mfe03.iptv.beanfield.com

Other certificates including the domain name beanfield.com

(limited to 100 certificates)
calling.beanfield.com
udrm.iptv.beanfield.com
udrm.iptv.beanfield.com
acom.fm.beanfield.com
mfe02.iptv.beanfield.com
fe.iptv.beanfield.com
*.teams.voip.beanfield.com
*.voip.beanfield.com
prd01.sap.beanfield.com
*.teams.voip.beanfield.com
mfe.iptv.beanfield.com
mfe01.iptv.beanfield.com
udrm.iptv.beanfield.com
mfe01.iptv.beanfield.com
*.beanfield.com
mfe03.iptv.beanfield.com
mfe01.iptv.beanfield.com
mfe02.iptv.beanfield.com
*.beanfield.com
mfe02.iptv.beanfield.com
udrm.iptv.beanfield.com
mes-mms01.905kingstw01.yyz.beanfield.com
mfe01.iptv.beanfield.com
*.sys.beanfield.com
udrm.iptv.beanfield.com
*.teams.voip.beanfield.com
mfe.iptv.beanfield.com
librenms.mserv.beanfield.com
mes-mms01.905kingstw01.yyz.beanfield.com
mfe.iptv.beanfield.com
mes-mms01.905kingstw01.yyz.beanfield.com
mes-mms01.905kingstw01.yyz.beanfield.com
mfe.iptv.beanfield.com
fe.iptv.beanfield.com
mfe01.iptv.beanfield.com
udrm.iptv.beanfield.com
udrm.iptv.beanfield.com
mfe.iptv.beanfield.com
mfe01.iptv.beanfield.com
mfe01.iptv.beanfield.com
librenms.pe.beanfield.com
mfe01.iptv.beanfield.com
udrm.iptv.beanfield.com
emslabapi.voip.beanfield.com
*.beanfield.com
mfe03.iptv.beanfield.com
mfe01.iptv.beanfield.com
mfe.iptv.beanfield.com
mfe01.iptv.beanfield.com
*.tor1sbc01.voip.beanfield.com
mfe.iptv.beanfield.com
*.beanfield.com
mfe.iptv.beanfield.com
*.beanfield.com
fe.iptv.beanfield.com
*.dev.beanfield.com
*.teams.voip.beanfield.com
mfe03.iptv.beanfield.com
mfe03.iptv.beanfield.com
mes-mms01.905kingstw01.yyz.beanfield.com
mfe.iptv.beanfield.com
udrm.iptv.beanfield.com
mfe03.iptv.beanfield.com
*.beanfield.com
*.staging.beanfield.com
mfe01.iptv.beanfield.com
mfe03.iptv.beanfield.com
udrm.iptv.beanfield.com
wifi.beanfield.com
mfe.iptv.beanfield.com
mfe02.iptv.beanfield.com
mfe02.iptv.beanfield.com
mes-mms01.905kingstw01.yyz.beanfield.com
mes-mms01.905kingstw01.yyz.beanfield.com
mfe02.iptv.beanfield.com
dev01.sap.beanfield.com
files.sec.beanfield.com
mfe03.iptv.beanfield.com
acom.fm.beanfield.com
fe.iptv.beanfield.com
udrm.iptv.beanfield.com
mfe02.iptv.beanfield.com
udrm.iptv.beanfield.com
mfe.iptv.beanfield.com
wifi.beanfield.com
*.teams.voip.beanfield.com
mfe.iptv.beanfield.com
*.beanfield.com
*.voip.beanfield.com
fe.iptv.beanfield.com
udrm.iptv.beanfield.com
mfe01.iptv.beanfield.com
mes-mms01.905kingstw01.yyz.beanfield.com
udrm.iptv.beanfield.com
udrm.iptv.beanfield.com
*.teams.voip.beanfield.com
*.teams.voip.beanfield.com
mfe.iptv.beanfield.com
*.lab.voip.beanfield.com
mfe02.iptv.beanfield.com

Certificate

The complete raw certificate details for mfe03.iptv.beanfield.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpJmpu6jS3sAd6nU5NCH
v6trklY/MZUdxVn3abaHCSsXXGdjSKPC0Va9sFEYbB9GwRP+vnXuHXZ/zcef2AKM
hp9oKHGbPpUZ7u1fttOkXICED9mNrmJXU0QW41WOuLP1+v4C6vWlsInXN2ISe1n0
TTu8T9e9iQ873H2VlhaeCJfD3bT9WWxYdJY9MF2y34OxL0H1xnRRmNZhXwYoejQM
RZEgskrZTeiL07xm7U7azdlSn7UMCr36GdTKfersLPnAbocrSLeOPDfRPRW0oi8U
Xki5rs/TA8uL8PcEE5BAZUPDGAf2jCRPOY1aymUF9Q7uSqJ1zmfev8J7f9JQRNV+
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314949489385890572439907307141674727295553
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-09 06:37:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-07 06:37:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mfe03.iptv.beanfield.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26077283839225781085872041248835845575440173844083402786660431571840438998224730052430808648571688336271458796154695938149331870434853742698811862341430130715247480341205227045953102069490961002943465062843846316752842483122233853113108604210458947057944337275849824452552653818507903241815703956672622099089448208935669990030517761261636268873896885343272567484150959812360781913451667509247643241931888447273074806247370345756560031860265497957498674801748412287845886811659906012015317667047646791278168254650013904916710198674024113205855922037440429760552208226239881326101669774986799257453183212058768001302231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4eb376f67aa79383cced8ef320f8cbf7a5b4a816
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfe03.iptv.beanfield.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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