annikids.com

Issued by R3

About this certificate

This digital certificate with serial number 04:52:f5:93:14:f4:ea:33:8e:e2:16:9c:7a:3f:4f:f8:66:5b was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=annikids.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:52:f5:93:14:f4:ea:33:8e:e2:16:9c:7a:3f:4f:f8:66:5b
Serial Number (int): 376678722366215795147790678515929503524443
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5d:35:22:33:9a:92:ee:98:dc:c6:fc:0e:b7:4b:81:be:3d:bd:60:66
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 95:a6:07:e3:eb:12:cb:61:71:16:a7:6a:62:95:b3:a9:83:ec:9a:18
Fingerprint (sha256): 7a:b1:fd:60:4e:7c:a8:d6:f6:f5:78:00:90:63:6e:08:1d:cb:ab:fc:ec:a4:0e:98:d0:8a:e2:05:e5:7c:b4:79

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate annikids.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for annikids.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.annikids.com
annikids.be
annikids.co.uk
annikids.com
annikids.de
annikids.es
annikids.it
annikids.uk
www.annikids.be
www.annikids.co.uk
www.annikids.de
www.annikids.es
www.annikids.it
www.annikids.uk

Other certificates including the domain name annikids.com

(limited to 100 certificates)
client.annikids.com
support.mangoho.com
support.mangoho.com

support.mangoho.com
support.mangoho.com
*.annikids.com
support.mangoho.com
fdowfs.annikids.com
support.mangoho.com

client.annikids.com
support.mangoho.com
annikids.com
support.mangoho.com
support.mangoho.com
support.mangoho.com
client.annikids.com
client.annikids.com

support.mangoho.com
client.annikids.com
support.mangoho.com
annikids.com
client.annikids.com
*.annikids.com

support.mangoho.com
support.mangoho.com
support.mangoho.com
support.mangoho.com
support.mangoho.com
annikids.com
support.mangoho.com
support.mangoho.com
fdowfs.annikids.com

support.mangoho.com
*.annikids.com
support.mangoho.com
*.annikids.com

pda.annikids.com
support.mangoho.com

support.mangoho.com
*.annikids.com
support.mangoho.com
support.mangoho.com
support.mangoho.com
client.annikids.com


help.disruptica.com
client.annikids.com
*.annikids.com
support.mangoho.com
support.tls-it.com
support.mangoho.com
support.mangoho.com
support.mangoho.com




support.mangoho.com
client.annikids.com
support.mangoho.com
client.annikids.com
support.mangoho.com
support.mangoho.com
support.mangoho.com
support.mangoho.com
client.annikids.com
annikids.com
support.mangoho.com
annikids.com
v5.annikids.com
support.mangoho.com
support.mangoho.com
annikids.com
*.annikids.com
support.mangoho.com
support.mangoho.com
support.mangoho.com
support.mangoho.com
support.mangoho.com
support.mangoho.com
support.mangoho.com
support.mangoho.com
client.annikids.com
annikids.com
client.annikids.com

support.mangoho.com
support.mangoho.com
support.mangoho.com
support.mangoho.com
support.mangoho.com
support.mangoho.com

Certificate

The complete raw certificate details for annikids.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y6YFx8gBwsZRzGY57FT
615frPMgnm5IWpzIGahKA17cbi3O4IZcbhhoeLj/DSMQh4DCq45TWakeQ5Te5eKY
l+ykkL8dcRSbUzW2ptsmCF5pFmBOthJw3na68NMSBmUavlQBIqUBGdusoP65tDrQ
OnU7+HdyDAOPsp26WQpoOYuvpls0plnf2eeg+jNvxUDtbk3moH66brL3EFnhisfV
2hOmPR4S/RMhkCOJm0KlEUnKd1rCxcjYn1a4ZTEqUHHiSFAnutHR2zl905JVipr5
qDYbFulcrCMQ2cFFinpmYFnWWvwTvxnrryVxfQyCoJOKkRm66ss+dlgRtykncllt
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 376678722366215795147790678515929503524443
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-31 08:17:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-29 08:17:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'annikids.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27464027950433766700259995103798404037376566088652471103707934088430454528748424958666570398641039055194867407729389032616501445181588287445467792883284534222298842186738173204754401670897124478246308099820242357613551913398422036475406226555476233587039119526203930041050902044972071062017862892584872348578609071277922886244771619207850485538196881769561378338883500615099028115332435539702562405327653383602411395837236609389119835479236255296516758044293552577316372561889927552432134511618545866037901724104635029807770169087814556054010734471743915001778139782362662338678962858871222738493028271162607078567223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d3522339a92ee98dcc6fc0eb74b81be3dbd6066
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (219 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annikids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annikids.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annikids.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annikids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annikids.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annikids.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annikids.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annikids.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annikids.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annikids.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annikids.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annikids.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annikids.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annikids.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000182f330f506000004030046304402204d9bbcef80333ceea54883a574d1142334e748a650c5edc9af002f6fcaf123d20220253b206d630dce98d790709061a3054085677762fde1f24b12acaf593ab8251300760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000182f330f50f0000040300473045022100832e2f141e78170fda5914ac46a59f08460a2c20e2cb33a97cc04c6dd25ff491022009bdf893abf91c1cd145a2da5abd164d2bf54f0f5ca0159030d8c7ca35e8967c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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