2md.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:39:6d:d7:11:76:2d:71:7b:23:0b:73:4c:52:2b:6f:15:df was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=2md.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:39:6d:d7:11:76:2d:71:7b:23:0b:73:4c:52:2b:6f:15:df
Serial Number (int): 280878955259303323629689404704439663531487
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9f:54:37:f7:43:85:7e:1f:63:d4:dd:c5:78:26:69:91:1a:e0:38:93
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 55:d6:32:9f:56:5b:fc:ef:4f:b7:ec:85:5f:c4:38:f4:a3:12:3b:92
Fingerprint (sha256): 63:de:04:d3:c9:07:cb:8a:d8:b6:c7:ce:f6:7e:bb:70:2b:96:90:d9:60:bc:ce:64:10:d0:83:10:7d:f2:cf:d4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 2md.co.uk

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 2md.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2md.co.uk
*.carriageworks.org.uk
*.sow-n-sew.co.uk
2md.3244e66428d82d98ff5776ea7-18684.sites.k-hosting.co.uk
2md.co.uk
carriageworks.org.uk
carriageworks.org.uk.3244e66428d82d98ff5776ea7-18684.sites.k-hosting.co.uk
sow-n-sew.co.uk
sow-n-sew.co.uk.3244e66428d82d98ff5776ea7-18684.sites.k-hosting.co.uk
www.2md.3244e66428d82d98ff5776ea7-18684.sites.k-hosting.co.uk
www.carriageworks.org.uk.3244e66428d82d98ff5776ea7-18684.sites.k-hosting.co.uk
www.sow-n-sew.co.uk.3244e66428d82d98ff5776ea7-18684.sites.k-hosting.co.uk

Other certificates including the domain name 2md.co.uk

(limited to 100 certificates)
2md.co.uk
mail.2md.co.uk
2md.co.uk
2md.co.uk
www.2md.3244e66428d82d98ff5776ea7-18684.sites.k-hosting.co.uk
*.2md.co.uk
2md.co.uk
2md.co.uk
2md.co.uk
2md.co.uk
2md.co.uk
2md.co.uk
*.2md.co.uk
2md.co.uk
2md.3244e66428d82d98ff5776ea7-18684.sites.k-hosting.co.uk
2md.co.uk
2md.3244e66428d82d98ff5776ea7-18684.sites.k-hosting.co.uk
2md.co.uk
2md.co.uk
2md.co.uk
www.2md.3244e66428d82d98ff5776ea7-18684.sites.k-hosting.co.uk
2md.co.uk
2md.co.uk
2md.co.uk
2md.co.uk
2md.co.uk
2md.co.uk
2md.co.uk
*.2md.uk
2md.co.uk
webmail.2md.co.uk
2md.co.uk
cpcalendars.2md.co.uk
webmail.sow-n-sew.co.uk
*.sow-n-sew.co.uk

Certificate

The complete raw certificate details for 2md.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cBORiFnskBlCYAPvWpT
BO2bpykPc4O42i+3z6t+pctgpjOd/mx5geDM/DdDGyn4bg0LZ1ow/mMq+ghXil1i
uDnW+ugIbXAyqZqNO1edKo17uh0VEqIe8wVhu16YaGndoAp/j8ch8AkFTCT6Jm5P
s+cs4Xp5hgLgQqkH5xaQmm3vh4A4kn+V6SBsdJF+BiqLOJFuXTe3ATgXPru+ZTvf
z1D1EB+cGnlCxxG0BF8NDsbFiliCGhAMeqg7Lq1TC+oCdtfyPquYlkWLrh5Veg1q
+0Wbyw9pAdKulBQt6/PHJd6+2D6CpoIHdJx/LrCAGbi8hwrptQ50aCQgTUqc+niY
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280878955259303323629689404704439663531487
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-31 14:59:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 14:59:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2md.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26478635241325927842070032875475484495669117656234217622027771446314897368918747940411347066592237677106607816595352307519387253793411288484120482911705869278829392965310651175870845223352574172984361628472966467928233198583657021187808125314750484274110303278234686719639534063884650465036666847708512786382600161014386908955582683583293039057737717173752641161760489091389283886815142305420297258294417065478126691289645004300332072257276723977438364424388033936379464351004442648024667685761495543809189766267852961197908769787067062507238606284080740543652621767504016377679091986108269276443382351145980237748247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f5437f743857e1f63d4ddc5782669911ae03893
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (534 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2md.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carriageworks.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sow-n-sew.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2md.3244e66428d82d98ff5776ea7-18684.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2md.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carriageworks.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carriageworks.org.uk.3244e66428d82d98ff5776ea7-18684.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sow-n-sew.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sow-n-sew.co.uk.3244e66428d82d98ff5776ea7-18684.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2md.3244e66428d82d98ff5776ea7-18684.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carriageworks.org.uk.3244e66428d82d98ff5776ea7-18684.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sow-n-sew.co.uk.3244e66428d82d98ff5776ea7-18684.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a4c5227250000040300473045022028dcd192a3d5dcbb9663e3cc37ad54497440a589b0767dfaddf02447a7eee295022100ac61478b7fb6269c9e52172499858b4786e58a3fda805c1ecfcbce822184362b0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a4c52273f00000403004730450220295a31fa69a4e5ed19dd52362a4f203282d30872465e5750ac5950f16ac80f21022100a25091e288d857eaf352df744b6dc9d1bc19d99564041448748fbfd51b2482fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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