neon-horizon.com

Issued by R3

About this certificate

This digital certificate with serial number 04:67:46:96:f4:80:b4:5d:15:a6:6f:8a:28:93:ee:44:a2:4b was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=neon-horizon.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:67:46:96:f4:80:b4:5d:15:a6:6f:8a:28:93:ee:44:a2:4b
Serial Number (int): 383592057283236340585413106509857583047243
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1f:a9:44:69:b6:22:05:07:31:7c:08:35:fa:be:b4:46:ce:2b:02:5f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 36:e2:3d:3a:df:31:12:dd:e6:65:76:c6:9b:9c:96:73:64:34:3c:ed
Fingerprint (sha256): 72:4a:38:79:f6:96:78:cb:6c:52:a0:ff:d1:f7:8d:42:71:cb:e6:1c:f9:f8:58:ac:8a:86:27:ed:6c:81:0a:bd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate neon-horizon.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for neon-horizon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.neon-horizon.co.uk
*.neon-horizon.com
*.neonhorizon.co.uk
*.neonhorizon.com
*.neonhorizons.co.uk
*.neonhorizons.com
neon-horizon.co.uk
neon-horizon.com
neonhorizon.co.uk
neonhorizon.com
neonhorizons.co.uk
neonhorizons.com
www.admin.neonhorizon.co.uk

Other certificates including the domain name neon-horizon.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for neon-horizon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMT7jOZhElafcJbX/xHk
t4dnbTXYWsNR85GMaMkfykDAWpE4a6LLv6XiPDsr/SMO0TbF+K7t365EU5IO6G6P
ajLIRjhLajGFj07v64Wvhd1qtERdINPuEB9JLksu6PKdXNxVD9+dkYcko/3fzMvv
ihprT1Aj/WOz54Xk7ETl9NmDSujS3twy5Uwgf/uC5QiAs1uaoPkdWKHBRbsvTM5R
qq8DdVQfIqtgNMHOhaFn3PrViLwJg/ZqdQn5DWEbId8F90BNXqfMB/BMB+obmrd5
t8f4E63KMT/kh92HoigmP4dUAIC2BN8qVSBSnPiY7F8SQsIHh4/roKpnGOSpB93r
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383592057283236340585413106509857583047243
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-03 03:24:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-03 03:24:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'neon-horizon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21305170983883769480065712331349614936775857861817095782136306825015434162731029926046788041614621221353612690468846447023607628336920934774039823181615381303760359726511065284937903484444113456905618855448474472933565565243277713286147370581977895843070977434405555550069951686618272442401321245760629438063702149773596740240759726781957793381217711245892711867307128770936913575117403141869349127864522195679772122758767083201200549787946495927878226800327007048107242102018469014874685506371546949961448037671731917706771353145716995522213318433066967622184768983188519207458192190594874559566893802399090868087733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1fa94469b6220507317c0835fabeb446ce2b025f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (269 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neon-horizon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neon-horizon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neonhorizon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neonhorizon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neonhorizons.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neonhorizons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neon-horizon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neon-horizon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neonhorizon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neonhorizon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neonhorizons.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neonhorizons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.neonhorizon.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d6d3660320000040300473045022100d1c8698a2913bac00a1f63d6e7c9ce6a4ccf4a463eec0637e69a5d8b8afbce7a0220558e6bf245bdd92a509b53a9a141dfa243ff041c712dc7d616bc31445af5fa00007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d6d36603e000004030046304402201a2cd310726a0eccbe21a853bd4de4ee20143b66095d874c15f1cc0041bfb03b02203e3901581f8c4823c2d2e33966d9da3aad912befea3e022321a67893bbd3e425
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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