atomage.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:a9:d3:f8:36:6a:15:29:a1:93:7f:fc:a9:af:65:5d:76:71 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=atomage.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a9:d3:f8:36:6a:15:29:a1:93:7f:fc:a9:af:65:5d:76:71
Serial Number (int): 406238619637065974136129458196770803512945
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: be:5f:f0:60:0a:5d:7b:1e:d3:60:2c:44:7a:6c:6f:a9:2d:f2:46:3c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 42:ab:f9:28:cc:9c:0f:e0:f7:77:76:14:19:d1:19:c6:b7:6f:de:42
Fingerprint (sha256): 5b:a2:fc:6b:da:2c:a0:c8:d7:9a:28:f3:16:49:a7:5c:f6:6f:3e:31:63:5d:8a:04:7f:f5:00:fa:69:e3:c1:a9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate atomage.co.uk

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for atomage.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atomage.co.uk
atomage.co.uk.b274cb8fc00c9d3f2e58132ce-16049.sites.k-hosting.co.uk
cpanel.atomage.co.uk
cpanel.atomage.co.uk.b274cb8fc00c9d3f2e58132ce-16049.sites.k-hosting.co.uk
mail.atomage.co.uk
webdisk.atomage.co.uk
webdisk.atomage.co.uk.b274cb8fc00c9d3f2e58132ce-16049.sites.k-hosting.co.uk
webmail.atomage.co.uk
webmail.atomage.co.uk.b274cb8fc00c9d3f2e58132ce-16049.sites.k-hosting.co.uk
www.atomage.co.uk
www.atomage.co.uk.b274cb8fc00c9d3f2e58132ce-16049.sites.k-hosting.co.uk

Other certificates including the domain name atomage.co.uk

(limited to 100 certificates)
thoradagena.com
sni.cloudflaressl.com
cpanel.icarusmail.com
sni.cloudflaressl.com
atomage.co.uk
atomage.co.uk
*.co.uk.b274cb8fc00c9d3f2e58132ce-16049.sites.k-hosting.co.uk
webdisk.medmenham.com
sni.cloudflaressl.com
thoradagena.com
sni.cloudflaressl.com
atomage.co.uk
atomage.co.uk
*.atomage.co.uk
atomage.co.uk

Certificate

The complete raw certificate details for atomage.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhpHnoK+Ih8eM5ICV1GV
mJmAQ0lZiTPUEWDJU0UvF4uccmXK9KqJO4GNB65eNid/4uyxSRp512tQGRnveA+4
qzdNAMifBLBlFqVYxOs6VtFDz3ZN1kNAE6FwFJC2XKFCcKOVUpnObqbK0WVxX+/I
MLw7qU3HHuw5L6qXEOlw0XmrnobM7xw2MnlxW4A2zj9YodRSdy9SKml34wEVpUFL
DdxW0Cf85nY13RAZedjlvynr/ewAxjvtN9fwtOP2BLdz9ZuX2l4KN4AcU28iwUwz
AasmKMkAu0x9IOv+/QpkZ8kGKZMjedJRDMD/+Tx9lsth0sCgOFD6GFNwJWpCIm+9
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406238619637065974136129458196770803512945
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-06 00:31:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 00:31:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'atomage.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26018049856852876544192192556660770284134760589241570947257327388380106730498322339353088530335788129479673350080150241519559012748133564736805294636067384244708382656473368489749769632131956286702362929586829432015200944865931189721630096548079955560456341760733457688206060286003401841057296482422654246132978074456310627853747583587391329392482911231514941343286234517718186722914586699247187889400164621358986128128101074014521764899274192079031236154928727777284727425430408922544324578917628537630467399919071639688090252329736538300022737852132309664228504453982181164361264072507719966313080981339102010916261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be5ff0600a5d7b1ed3602c447a6c6fa92df2463c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (498 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atomage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atomage.co.uk.b274cb8fc00c9d3f2e58132ce-16049.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.atomage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.atomage.co.uk.b274cb8fc00c9d3f2e58132ce-16049.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.atomage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.atomage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.atomage.co.uk.b274cb8fc00c9d3f2e58132ce-16049.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.atomage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.atomage.co.uk.b274cb8fc00c9d3f2e58132ce-16049.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atomage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atomage.co.uk.b274cb8fc00c9d3f2e58132ce-16049.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b029c9ea6000004030047304502201d8f36767c00d2fb45e543e28007c9773a0330e30d8a0f9a85557b390358d79302210094f3a6df3c526bbb1ea9a3c6c38cd411b3a5225a82e69f60066d2ff6c309f90d00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b029c9ee50000040300483046022100bf4d6498dd476b85637646eed8aff203d38a5981c00442e6ffeb4d44839e94e50221009c4fa0979ba482dce2ee2ea4bc652a609f1c0e24796b64ee6cb5db9bc73a9e3d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005ec1a8ea06e244f2126255218b8564eccbb82fe0c9d37976ac6c87f4e669ca31477b195315cca101a88e014922ab30e158d740a1ffbe3c2dfe89b1b6c62ec679855e966604e8cfa272508eacd4c68b803b938d46b9b9fc3bb17fe1237f07d807ac43991dbf1e0af29ea74841fb2401f560eda6509eaebaef24215b14d3839562fae562367f3a005e3e79572acee4c5f5949195bf2c9f8457dfc85409ace227ff535cb58f8a3ae90b169f048014d28934496733f1aa3a3e42d38ece5c9c3754931d53e364f4b535c519b2ac1daeb20e3c6a8bb84049e2b1e2bb52e3807423ca83cc5f1bf78ea5a10f50d127afcfd4bfe2c23a80288098f4adbc7b4a764632bb95