mechanical-integrity.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:de:a7:9f:09:be:a7:15:dc:99:1e:34:63:81:34:7e:6d:ee was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mechanical-integrity.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:de:a7:9f:09:be:a7:15:dc:99:1e:34:63:81:34:7e:6d:ee
Serial Number (int): 424214636031632661200135422028480692252142
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f1:59:f1:b4:da:5c:91:16:96:b0:99:0e:d7:1b:ac:5b:d5:67:60:08
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3b:fe:12:2b:1e:8f:d6:7e:26:82:9c:a9:df:62:14:1f:1f:71:06:8c
Fingerprint (sha256): 54:cf:5e:be:22:10:cc:1b:04:ca:c1:d7:d5:3e:ba:06:06:22:39:b4:55:77:e1:ff:68:9d:bc:26:c3:6f:85:f3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mechanical-integrity.co.uk

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mechanical-integrity.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

asictank.com.gypsyai.com
digitalnicesko.com
fortworthschool.com.dallasprivateschools.net
getyourpal.info.eforming.com
kosovo.biz
lgbtqtkts.com
mechanical-integrity.co.uk
medicinesugar.com
meisterprep.at
nft2l.com
oxnardlandscaping.com
thebannernetwork.com
voodoconcept.com

Other certificates including the domain name mechanical-integrity.co.uk

(limited to 100 certificates)
trailerskirts.ca
mechanical-integrity.co.uk
mechanical-integrity.co.uk
heavymeta.bible
mechanical-integrity.co.uk
mechanical-integrity.co.uk
sculpit.engineering
mechanical-integrity.co.uk
mymedicaremarketplace.org
accountabilitygroup.ca
mechanical-integrity.co.uk
www.hydratight.ca
p2wgames.xyz.businesscredit.ninja
arbitrageur.vc
git.maidagency.org
heavymeta.bible
omeiapad.de
peeriq.org
mechanical-integrity.co.uk
www.hydratight.ca
mechanical-integrity.co.uk

Certificate

The complete raw certificate details for mechanical-integrity.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGCTCCBPGgAwIBAgISBN6nnwm+pxXcmR40Y4E0fm3uMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTAyMDU5NTZaFw0yNDAzMDkyMDU5NTVaMCUxIzAhBgNVBAMT
Gm1lY2hhbmljYWwtaW50ZWdyaXR5LmNvLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnpH1NqtImM8EXFCTvg5eq7Phe8BAk6F+se8i7O6ihhxa5Dhe
E6U7O5ueH/105hOcGbThJTCquXuZnEJM27ZF7jsLYMAXlboNarHjsZPKmNmfYgAm
yevWmPHmaFgEiL/kwAcGagv82fkBIZHtTIpRmsRMOX66bcVDOA88eElT34Jk4Ydc
Po/eGyyPZGEt9nCOCqdHI0+4jt7NlspjVNlZ5JqUS7GGnuRm4MWEPrKsN6wremYJ
nW5j8oLPVOiNSJzFUYbEKrK0ec7b9PCxgMUC2VgZA57x/ih60FriBZrxKPQTd/7t
5UapiDoYMGptq5c9Ql13PQ2922/MsE79V1wbaQIDAQABo4IDJDCCAyAwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBTxWfG02lyRFpawmQ7XG6xb1WdgCDAfBgNVHSMEGDAW
gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH
MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz
LmkubGVuY3Iub3JnLzCCASsGA1UdEQSCASIwggEeghhhc2ljdGFuay5jb20uZ3lw
c3lhaS5jb22CEmRpZ2l0YWxuaWNlc2tvLmNvbYIsZm9ydHdvcnRoc2Nob29sLmNv
bS5kYWxsYXNwcml2YXRlc2Nob29scy5uZXSCHGdldHlvdXJwYWwuaW5mby5lZm9y
bWluZy5jb22CCmtvc292by5iaXqCDWxnYnRxdGt0cy5jb22CGm1lY2hhbmljYWwt
aW50ZWdyaXR5LmNvLnVrghFtZWRpY2luZXN1Z2FyLmNvbYIObWVpc3RlcnByZXAu
YXSCCW5mdDJsLmNvbYIVb3huYXJkbGFuZHNjYXBpbmcuY29tghR0aGViYW5uZXJu
ZXR3b3JrLmNvbYIQdm9vZG9jb25jZXB0LmNvbTATBgNVHSAEDDAKMAgGBmeBDAEC
ATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AEiw42vapkc0D+VqAvqdMOscUgHL
Vt0sgdm7v6s52IRzAAABjFW+fPgAAAQDAEcwRQIgO3TljMZ9JeAfIRSskkmmOc5y
2C4XDF8tzpFSYI7/n+sCIQDH2QVGodmeyqc36TvVNHjqSAQDKya/XZNoEgIOvivp
1gB2AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfYAAABjFW+fREAAAQD
AEcwRQIhAPB36+1UuzrJxCCl9cukvD3UmPiXLaW6Q+iUocizmz44AiA2beJdSHOs
aOVCGOLOCHCGK15/tNB2daxk34pqTP/cwzANBgkqhkiG9w0BAQsFAAOCAQEAMcsI
VdsWa8ZFzedGUVnrfh0gGMl594cM9ABjZU2Q57j74ST3TGB+A4hOWSjapDtQLIu3
/NWH+6TruaeItbWT8NHCffObZNjLq8TMbphbCX/sCnfi163bi6UosxMQTeASK9s1
vUfRkeNEOEq4jTcw+ipeRKUBwsxBbyrQBtNuPp6s74SruWtw/si+FM2IMlulOpzf
PPe6225bYBO51RsHUx+/aFy+8u5SIaiM9PGJclTzw+bK2onTANDAtQS38JKWMHkf
CqBSzMFsKru2EevMJJR8CfENAvOItGDLeNQ9sxa53mZ8CMVHvIxNBjTK/Fb1bgmv
ejJ99kFk1JGWVFbdgA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpH1NqtImM8EXFCTvg5e
q7Phe8BAk6F+se8i7O6ihhxa5DheE6U7O5ueH/105hOcGbThJTCquXuZnEJM27ZF
7jsLYMAXlboNarHjsZPKmNmfYgAmyevWmPHmaFgEiL/kwAcGagv82fkBIZHtTIpR
msRMOX66bcVDOA88eElT34Jk4YdcPo/eGyyPZGEt9nCOCqdHI0+4jt7NlspjVNlZ
5JqUS7GGnuRm4MWEPrKsN6wremYJnW5j8oLPVOiNSJzFUYbEKrK0ec7b9PCxgMUC
2VgZA57x/ih60FriBZrxKPQTd/7t5UapiDoYMGptq5c9Ql13PQ2922/MsE79V1wb
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424214636031632661200135422028480692252142
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 20:59:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 20:59:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mechanical-integrity.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20017626690609295226678894118318299022747493165176965285538340200714175888949264233910644493668958154236663537235115611995943435442474839206344939196258866011206856881962199158727342223627159838584642048418722957890179577748241321270622539128526261561209109546514324793721115448324580910766910990143601895758726942218120972045545820887925658726792038438946674855747586657791410175629258473266679070304506381615056266809570206185644144692508381174091447257999074883025708924167033096036209784795882482238827691426988594512808483738566838917952753752032258264340197875793247670236334042022540815626653724992947208592233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f159f1b4da5c911696b0990ed71bac5bd5676008
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (290 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asictank.com.gypsyai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalnicesko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortworthschool.com.dallasprivateschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getyourpal.info.eforming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kosovo.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqtkts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechanical-integrity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicinesugar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meisterprep.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nft2l.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxnardlandscaping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebannernetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voodoconcept.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c55be7cf8000004030047304502203b74e58cc67d25e01f2114ac9249a639ce72d82e170c5f2dce9152608eff9feb022100c7d90546a1d99ecaa737e93bd53478ea4804032b26bf5d936812020ebe2be9d6007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c55be7d110000040300473045022100f077ebed54bb3ac9c420a5f5cba4bc3dd498f8972da5ba43e894a1c8b39b3e380220366de25d4873ac68e54218e2ce0870862b5e7fb4d07675ac64df8a6a4cffdcc3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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