www.slevencrossfit.com

Issued by R3

About this certificate

This digital certificate with serial number 03:11:43:78:b5:53:78:cd:48:9a:d2:5b:39:34:47:4d:ce:65 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.slevencrossfit.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:11:43:78:b5:53:78:cd:48:9a:d2:5b:39:34:47:4d:ce:65
Serial Number (int): 267211343062006769485023257854314023865957
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:aa:e5:6c:1a:31:f9:09:e0:d8:35:57:78:c2:ee:10:af:2e:2b:84
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1f:ea:2a:ac:cf:aa:64:c0:68:c4:57:3f:68:90:8b:05:3f:64:3a:31
Fingerprint (sha256): 5a:d6:a5:b2:7f:fb:11:bb:4a:04:56:7d:16:18:cc:ce:4d:c3:60:8d:a8:c4:ac:e1:de:95:11:90:02:6f:0a:02

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.slevencrossfit.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.slevencrossfit.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.e255a213cc03934980ac52c6d-17139.sites.k-hosting.co.uk
*.slevenfitness.co.uk
cpanel.slevenfitness.com
cpcalendars.slevenfitness.com
cpcontacts.slevenfitness.com
mail.slevencrossfit.com
mail.slevenfitness.com
slevencrossfit.com
slevenfitness.co.uk
slevenfitness.co.uk.e255a213cc03934980ac52c6d-17139.sites.k-hosting.co.uk
slevenfitness.com
slevenfitness.com.e255a213cc03934980ac52c6d-17139.sites.k-hosting.co.uk
webdisk.slevenfitness.com
webmail.slevenfitness.com
www.slevencrossfit.com
www.slevenfitness.co.uk.e255a213cc03934980ac52c6d-17139.sites.k-hosting.co.uk
www.slevenfitness.com
www.slevenfitness.com.e255a213cc03934980ac52c6d-17139.sites.k-hosting.co.uk

Other certificates including the domain name slevencrossfit.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.slevencrossfit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SqYwT6Qpn4kalaa5pxM
g+n6qS4HcXs6+bQl5AnQwexboOQKno1Y4aRNplTFhR9SCJ1/kI2t2eAMXU6TRzbO
1YLYo5cjFvsvu2QME5tWYA1IKAPsUv2K06Hi/3/VxnimXEuCe6BJzEsp02hlyDdv
m0Stp/lF5xGJ/OEJ/qpVv3cF3j6s4mz0Wn57DVIxs809gkxN0IGKO2s/PwRQ3pjW
pOLfhjRZ8/YHukROduLB2bbaLzHWEiuxoxcL0aispDfNh32Tb7tvjmKftCXpZN2s
4OEmtMTVtOpbzWXgqdhpYgxIJgiFnbHL2OtsQwB1YOCpMADvQmhIxZts0eprEXrR
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267211343062006769485023257854314023865957
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 20:22:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 20:22:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.slevencrossfit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26404810952898203340961616864684322449379777433675504112062883576029544930522392567907551690662347792988600937616102035169140627262371565096910889189801309346476081653453710558338431274247146809635719632277701837206065593728126302293481813622755230619925743104869489458491052581596753881222101060303340937530639428057991311634196913788742100815137090521089072450072233168574678013525890322303932259500408746286827559930585560405839066607164630003370846245067748991436563848290887738876235039859178086757444353443007544948621404200859347353849486282241130992984795477287369832078018784189088486908013949849099868754261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2aaae56c1a31f909e0d8355778c2ee10af2e2b84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (685 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e255a213cc03934980ac52c6d-17139.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slevenfitness.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.slevenfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.slevenfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.slevenfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.slevencrossfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.slevenfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slevencrossfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slevenfitness.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slevenfitness.co.uk.e255a213cc03934980ac52c6d-17139.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slevenfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slevenfitness.com.e255a213cc03934980ac52c6d-17139.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.slevenfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.slevenfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slevencrossfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slevenfitness.co.uk.e255a213cc03934980ac52c6d-17139.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slevenfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slevenfitness.com.e255a213cc03934980ac52c6d-17139.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d8a99ff8f00000403004630440220640df01bbe18b44a3562dadb194c3305267956f77b39e6bc383c55bac76602b002204f37f852ba6b4d690846a7e41dd7afc9805841bf83b831f87b22be7e5987402300760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d8a9a017d000004030047304502206ae0db3b114dd0ab428fb06e8159b6e6110c3125eb912c2c8acd4921fa6ebf41022100f924d5012fdb24b058962a9b05bf9e0e53693b9daa37b08ed1b2722ffc90e28d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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