cpcontacts.devon-turf-topsoil.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:f3:6b:6f:fc:e6:5a:6b:4a:92:3e:f7:11:1c:83:25:d4:f5 was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cpcontacts.devon-turf-topsoil.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:6b:6f:fc:e6:5a:6b:4a:92:3e:f7:11:1c:83:25:d4:f5
Serial Number (int): 344168281826986750782340448137868655056117
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:5a:28:de:6a:79:4f:36:b4:e7:ff:5c:0b:0b:ff:41:6a:c3:6b:71
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 34:e1:12:79:70:9e:f9:95:80:a1:6e:df:f2:e0:8d:12:73:c9:c0:8c
Fingerprint (sha256): 77:68:2d:a4:65:47:17:da:bc:72:e6:df:4e:b8:f9:01:25:f7:0f:58:6f:86:fe:6e:04:bb:b1:82:d6:8b:dd:c3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cpcontacts.devon-turf-topsoil.co.uk

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cpcontacts.devon-turf-topsoil.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.devon-turf-topsoil.co.uk
autodiscover.lydia-art.co.uk
cpanel.devon-turf-topsoil.co.uk
cpanel.lydia-art.co.uk
cpcalendars.devon-turf-topsoil.co.uk
cpcalendars.lydia-art.co.uk
cpcontacts.devon-turf-topsoil.co.uk
cpcontacts.lydia-art.co.uk
devon-turf-topsoil.co.uk
devon-turf-topsoil.co.uk.rainbowwebservices.com
lydia-art.co.uk
lydia-art.co.uk.rainbowwebservices.com
mail.devon-turf-topsoil.co.uk
mail.lydia-art.co.uk
webdisk.devon-turf-topsoil.co.uk
webdisk.lydia-art.co.uk
webmail.devon-turf-topsoil.co.uk
webmail.lydia-art.co.uk
www.devon-turf-topsoil.co.uk
www.devon-turf-topsoil.co.uk.rainbowwebservices.com
www.lydia-art.co.uk
www.lydia-art.co.uk.rainbowwebservices.com

Other certificates including the domain name devon-turf-topsoil.co.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for cpcontacts.devon-turf-topsoil.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2G+H0VVxVmQG77LXVpmL
4T/eux0NKlqqkhcCq1ZCet1HZuwGCrpgNitD6omF/CkNHRL5jjALk44KHLJVamiy
6Mm1yt5rXyd3X8BXcYB8UFX/zjpA/+IXEkx0Qg3wysraoNFKWTB7Xt2sO/DaCutG
K2Ql16lMkIb5737L5FB6u5xwNYrHXQy6iULtFsD85wrGj0bqSLdUGlrtzweCWGix
T9i8ifSwxIyu9PQuVNmeMfRZBAYP3lBDbMrW1GfHfhgpwv1aUwkvh11+dh7kbECG
2noDtU8kMiP9CRoXt6fsoKZxpxQ4kzICFWUfaqdaoASor/Fdk+5oe0I5UgzsJzcC
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344168281826986750782340448137868655056117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 23:47:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 23:47:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpcontacts.devon-turf-topsoil.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27322471630716309662259476548899782121602508009622591034923459068059148703565051938015097537472247116999904894907880362265156124235347753041936903910916991834647834184047999539719776159225722090366159118431169505382752409291092585924173251875357258005584113379991243607888943855991331344424949186211896897612139198848512991905296069824063960787551003800633856737754095724614678710324227856795320584893384109120601811773648518632133402055319088460730687711466746960757991507370856052909774761537756301572978522492271467181120799097674927433035924517227982246035122071326938249681889280159282064273666760856045083886181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							545a28de6a794f36b4e7ff5c0b0bff416ac36b71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (713 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.devon-turf-topsoil.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lydia-art.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.devon-turf-topsoil.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.lydia-art.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.devon-turf-topsoil.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.lydia-art.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.devon-turf-topsoil.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.lydia-art.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devon-turf-topsoil.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devon-turf-topsoil.co.uk.rainbowwebservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lydia-art.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lydia-art.co.uk.rainbowwebservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.devon-turf-topsoil.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lydia-art.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.devon-turf-topsoil.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.lydia-art.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.devon-turf-topsoil.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.lydia-art.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devon-turf-topsoil.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devon-turf-topsoil.co.uk.rainbowwebservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lydia-art.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lydia-art.co.uk.rainbowwebservices.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e44ba5fbf0000040300463044022039a3b7a6b58a824e7a3fba879f4ed247825f707fc1cc6bf29e09317ff4fd9ae802204cc3a56e79b3d8a6e820509ac8f91e5b9379067cdcb84a24bc474fb54ec6dcdf007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e44ba61c20000040300463044022072f974ed025c7cb3a821fe02845eb53fdab6fb09f6f9b4174338045bca231aab02207d221207e00f5d2d7469e8c62a0a06982c86c064e7f76ddb0b6a9564ba0321e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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