mail.adayinthewoods.org.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:cc:4b:47:c4:19:61:bc:eb:28:ac:60:ad:ea:04:ed:db:16 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mail.adayinthewoods.org.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:cc:4b:47:c4:19:61:bc:eb:28:ac:60:ad:ea:04:ed:db:16
Serial Number (int): 330854525377276245962726713530198013106966
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 94:15:9d:60:45:e4:69:ff:8d:3a:81:f5:13:8c:d4:ce:b5:39:5e:2f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9f:73:7d:a9:97:42:25:67:ac:87:b0:8b:54:5c:94:17:22:38:08:3e
Fingerprint (sha256): 4e:b7:58:8c:aa:65:98:0e:0b:00:16:47:36:dc:77:0f:5a:53:f0:37:c5:e7:0a:fd:c7:bf:a9:fd:46:da:1f:65

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mail.adayinthewoods.org.uk

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.adayinthewoods.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adayinthewoods.kissdigital.co.uk
adayinthewoods.org.uk
cpanel.adayinthewoods.org.uk
cpcalendars.adayinthewoods.org.uk
cpcontacts.adayinthewoods.org.uk
mail.adayinthewoods.kissdigital.co.uk
mail.adayinthewoods.org.uk
webdisk.adayinthewoods.org.uk
webmail.adayinthewoods.org.uk
www.adayinthewoods.kissdigital.co.uk
www.adayinthewoods.org.uk

Other certificates including the domain name adayinthewoods.org.uk

(limited to 100 certificates)
mail.adayinthewoods.org.uk
adayinthewoods.org.uk
mail.adayinthewoods.org.uk
adayinthewoods.org.uk
adayinthewoods.org.uk
adayinthewoods.kissdigital.co.uk
adayinthewoods.org.uk
adayinthewoods.org.uk

Certificate

The complete raw certificate details for mail.adayinthewoods.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIJXzla/WVoaryYUqeqS
113Zwsn3n8sp+qyod+S6ycY5+thYNcY1WdRQ/WwioSQzoYfcX6aewwhqkVf7Cowo
+puGI96I8aoYVQUnYvXGkPW4Zx1w4VDYWglRh1BKP/awqGv55HV/MvEzsz6LWa1n
W6zv8atW6N6HSaj2s1IW+I4MLzb9f5mJeazsvXAu37BFez0dyh4pMHDLkwUcUKGc
TQut8YBVRFQNTxXX/FKeWrSgrgwDDrfoqhXhN86II4DrrFHmQ7+i9z4Ey48gmEq3
Iwu7J4QqumwGwnOCEx48txUWMRT4lc7CQZxaff1z1wHw/N/meKm7ZvCzumio2fGs
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330854525377276245962726713530198013106966
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 00:38:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-06 00:38:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.adayinthewoods.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21777262979175590803008922955500353542140480919575047488629923440506476923495541629691473721997972546649040174343126770918645091890830472455357572953815702071381149418781288575555112846968511425824526474940304867319569308247562815003591170043926932038652321282548997540814473026608464618942597874760881389231072241887849403507145807823766543792920131608847900475167948453454812265883533838784723166857271351669985351314344397849966199399080716199313669856405400812705481303898264065301626706222518075434207710929249007054336242969139386982575086160993380481470969937917164338668334298694616893450031407769348549487839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94159d6045e469ff8d3a81f5138cd4ceb5395e2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (354 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adayinthewoods.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adayinthewoods.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.adayinthewoods.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.adayinthewoods.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.adayinthewoods.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.adayinthewoods.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.adayinthewoods.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.adayinthewoods.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.adayinthewoods.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adayinthewoods.kissdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adayinthewoods.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018eb6356bc30000040300483046022100f9b3a8be90439a198df6f393122ca9529858cf3f6b41e0c6d668eb5ecdef5d63022100f819f7a4d4a5ea9588cc883a33124489b053cdc6836d2e3f91317a1f87efdf30007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018eb6356c7f00000403004630440220657a0a0b8745dce639f21c5bd6d4288ec877ae9ef21bf49aab95acc5ce1033d302206243c1f0d0685b752cda7f61f8d6a6983810378eb6b5a5a0796c5d727f4659cd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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