mail.iangclark.net

Issued by R11

About this certificate

This digital certificate with serial number 03:8c:2d:35:09:3b:05:f5:be:69:e5:f8:9f:0b:e5:aa:25:80 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mail.iangclark.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:8c:2d:35:09:3b:05:f5:be:69:e5:f8:9f:0b:e5:aa:25:80
Serial Number (int): 309036479802973940917173780067773831587200
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d8:37:66:3b:d5:97:16:1c:53:f2:5b:ee:e9:2a:47:b8:56:c6:89:51
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): dc:6b:a5:7c:58:18:94:0c:aa:d7:0e:52:98:99:32:89:f6:f7:a6:76
Fingerprint (sha256): 7c:fa:c5:3b:07:c6:cf:be:e9:78:63:4a:d2:c9:55:e6:dc:99:90:0d:56:c8:45:de:7c:25:1f:b3:38:41:f8:5a

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate mail.iangclark.net

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.iangclark.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.iangclark.net
cpcalendars.iangclark.net
cpcontacts.iangclark.net
iangclark.net
mail.iangclark.net
thehytte.com
thehytte.iangclark.net
thereadingroomshaydonbridge.co.uk
thereadingroomshaydonbridge.iangclark.net
webdisk.iangclark.net
webmail.iangclark.net
www.iangclark.net
www.thehytte.com
www.thehytte.iangclark.net
www.thereadingroomshaydonbridge.co.uk
www.thereadingroomshaydonbridge.iangclark.net

Other certificates including the domain name iangclark.net

(limited to 100 certificates)
iangclark.net
iangclark.net
www.thehytte.com
iangclark.net
iangclark.net
functional-webdesign.co.uk
cpanel.iangclark.net
practical-security.co.uk
practical-security.co.uk
thehytte.com
iangclark.net
practical-security.co.uk
functional-webdesign.co.uk
iangclark.net
functional-webdesign.co.uk
iangclark.net
mail.iangclark.net
iangclark.net
thehytte.com
thereadingroomshaydonbridge.iangclark.net
functional-webdesign.co.uk
practical-security.co.uk
thehytte.com
iangclark.net
iangclark.net
iangclark.net
www.iangclark.net
iangclark.net
thehytte.com
thehytte.com
iangclark.net
thehytte.com
functional-webdesign.co.uk
functional-webdesign.co.uk
iangclark.net
iangclark.net
functional-webdesign.co.uk
iangclark.net
thehytte.com
iangclark.net
iangclark.net
iangclark.net
iangclark.net
practical-security.co.uk
thehytte.com
functional-webdesign.co.uk
thehytte.com
webmail.iangclark.net
practical-security.co.uk
iangclark.net

Certificate

The complete raw certificate details for mail.iangclark.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS8Ebl5DSKNEHnKmIE9b
t4pv+Nm+FwvFmAXRwIH0S3Ci03BaEndmd82rLgGYurX3JimUmPg5XWg8KNoO9swl
JKHV/tzb7Cn8usk5fgkivkU3xfkaSDS0F+l/CSUnwxI7i8biByPEZEzTzcZzQial
LHZ0HdvEYlJ8iDF8URn1N7Jq5FIVZi7aF4jBccBm278I5YWu1Qs/9viThBl0/p/b
1JHASun2UhXlzfFZftbKb+/6tj2y18lUVbRqoeLm/e2xiIdlDPku+xIl0B2d+XY7
o5XrDu9pVghXW2oBKAd/KDFie6tH366F+svsOfSTChbWBf9MSAmG10vP3Fg0oFPF
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309036479802973940917173780067773831587200
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-22 22:53:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-20 22:53:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.iangclark.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23882224737815522730850287180819768257621045589559945449488772133068212329094065850188780722174850660485291455431836161423605002798679785814232314447384067131419609290860933265383731099683677556803967044833709526331363456169416520315896088355651146008731953501534026750592771693752764091281827195576135183431170833489595482538808002161093724719041897956912341049604279539705129967033273043817994812610055264138817817042554819437807363428719789791459297967650105948503368964931898580706654252823707601911539063919667644474441955538195299695366141333589638429077350648687219833978970440037265015326923589632741684266367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d837663bd597161c53f25beee92a47b856c68951
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (427 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.iangclark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.iangclark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.iangclark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iangclark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.iangclark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehytte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehytte.iangclark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thereadingroomshaydonbridge.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thereadingroomshaydonbridge.iangclark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.iangclark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.iangclark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iangclark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thehytte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thehytte.iangclark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thereadingroomshaydonbridge.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thereadingroomshaydonbridge.iangclark.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000190425eee1e000004030046304402205bebfd3238d43b86e9b88cbb790897e67727475c287734774988ac5d70074ec502207127d26e00049c3eeebdad60786f98a87110d1eda2aa387dd743b2ba8c421dcd0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e00000190425eee2200000403004730450220113b1d6f286ec2af3ce566a8b21acda69adcfa724be47b2bcec23f6df01c2c31022100b22b0d87ad7395722e5a15f2698d51e2c6cfe3517781b3138b5efb916aaf45da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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