cpcalendars.leecates.com

Issued by R3

About this certificate

This digital certificate with serial number 03:09:96:62:ee:72:5d:99:1f:45:bf:bb:7d:73:64:f9:ee:a0 was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cpcalendars.leecates.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:09:96:62:ee:72:5d:99:1f:45:bf:bb:7d:73:64:f9:ee:a0
Serial Number (int): 264599296978303523320052720621192585277088
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 41:94:b5:fd:09:4b:b8:8e:03:52:93:5f:14:e4:58:8a:cf:0d:af:fa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cb:d5:0e:e4:ca:68:1a:a0:db:84:d5:dc:1c:3a:f2:4f:fa:e0:de:fc
Fingerprint (sha256): 6f:7f:94:ee:98:80:4f:35:82:7b:ab:38:d4:62:48:63:d3:37:f0:e4:62:35:91:4f:13:1f:63:28:bb:b2:04:40

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cpcalendars.leecates.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cpcalendars.leecates.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.leecates.com
autodiscover.thecodex.us
cpanel.leecates.com
cpanel.thecodex.us
cpcalendars.leecates.com
cpcalendars.thecodex.us
cpcontacts.leecates.com
cpcontacts.thecodex.us
leecates.com
leecates.jonathanbosley.com
mail.leecates.com
mail.thecodex.us
thecodex-us.jonathanbosley.com
thecodex.us
webdisk.leecates.com
webdisk.thecodex.us
webmail.leecates.com
webmail.thecodex.us
www.leecates.com
www.leecates.jonathanbosley.com
www.thecodex-us.jonathanbosley.com
www.thecodex.us

Other certificates including the domain name leecates.com

(limited to 100 certificates)
leecates.com
cpcalendars.leecates.com
autodiscover.inaudible.us
thecodex.us
devyz.net
devyz.us
mail.inaudible.us
leecates.com
devyz.us
bik.kr
spacedmanthemovie.com
chefdcdallas.com
leecates.com
chefdcdallas.com

Certificate

The complete raw certificate details for cpcalendars.leecates.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo10jp4WnzSjQtN3kSg9
TV+ujq9lATOJOGaodG+XZ3NLyDojZTDsmkIUwhmJp8rhX89b07+9XSYVGPx+nm0q
GTorwxync+O33N+QKYS1m1CenhZj5sFM0+Pv27exLyl/yPZ8Sgbvyk+4nte4kqmk
7YfYLMaIASpxmnrkJVCYZJVcYjUd/9iX/iNKVCAtVixO8DRwLDhVafownlAoNgnF
h42SiVZyoxwAHej4BV2ja0lmtlfe30tKikIVwnncYnTs2Ja+V28hX5HTUe7N9DVq
Y7foBBkUWAP75ecwxAOgJkP5mASJWsEpMb9PzFwoJZ1gH/Ot9yeNotHcf8bACzvz
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264599296978303523320052720621192585277088
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-22 14:17:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 14:17:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpcalendars.leecates.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21025312833148040501412965620118739468709561032745634967383072638136335654546625324719374694048876231823179174261577194951115491054056238439956835348252546751844787133307488703865279887676220222638763049472371271029993244790180561376351110581888773379894030520739666132291358274970708202340060465238700939001672325413605942468038369145400558071483872320803338767766293898372034960603368793486459458760441380442272983550814548788665275690590868339253489828395081198043084384987663555862558315929767540020704798728119316808000158352820451497715528904332212540682193933496480612633633979893638949115039937956395425198959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4194b5fd094bb88e0352935f14e4588acf0daffa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (513 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.leecates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.thecodex.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.leecates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.thecodex.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.leecates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.thecodex.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.leecates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.thecodex.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leecates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leecates.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.leecates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.thecodex.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecodex-us.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecodex.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.leecates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.thecodex.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.leecates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.thecodex.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leecates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leecates.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecodex-us.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecodex.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a1dd2533c0000040300473045022052cb8a8bd78758b74b55efc5aeae6a7565f2498e171d5cc6c20c27764f58bbf2022100e4256b24c043921a39d99873bea1cf70d06259e9bfd31daa206e48064161a2c1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a1dd2532e000004030047304502202bc2f9b2ca775c8765481fdffcd6087f7e6385d5b732c25b34803ea5cfcfd93d022100b9a2ab8c87e26c143ffbdffbc71a5b27768c4f13d0ab232ae101c4da2e9f02e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00004f1cfd9f73d19daaf80c46a3e2b68a0212500bc68fe73e2cadc9dcb24d8f67c43c32e2b9c71f151cbad8f2469824c738ed1c4e0a694ae40394a8294e79f3424bbaa84ac298e64ead180d055752925a608f31d9b46bcc7c25b02a2375f7b66981940039e5ca87026847a91158736211b3b085f27a2efe581c2e2632b96c582170c0fa49879871087ac6191af980024c5805af59ea52bf460fea1df2fec5b9f50ed47ed6d4636d5b2cb6269bc8a218e0d7b99c984d2c79bc158a0018174b06765a08ab153250922734f570809f8afd33e3fb90c4d451d649186afab29828fc358d36e52bab31fc5213d7f68311a353b2bddd39fa1ececea537046467139403ee