auditionsapracticalguide.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d5:dd:5f:08:76:c8:df:c5:f5:4f:9a:5e:10:10:b2:5c:b4 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=auditionsapracticalguide.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d5:dd:5f:08:76:c8:df:c5:f5:4f:9a:5e:10:10:b2:5c:b4
Serial Number (int): 334111254776381027407256925375582409219252
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:1a:0a:bb:f5:12:dc:b5:b2:58:a3:72:f5:7b:0d:0e:67:61:8c:a1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a9:21:54:31:e0:37:7a:e4:df:5f:ff:9d:b1:68:e8:51:d4:3f:bc:af
Fingerprint (sha256): 89:59:b6:a9:43:09:62:8b:db:02:d5:31:30:14:2c:5b:5e:34:2f:e7:7d:f0:95:3b:2c:ac:30:67:ad:63:af:1c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate auditionsapracticalguide.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auditionsapracticalguide.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auditionsapracticalguide.13ed48f74be945d53725c028a-17406.sites.k-hosting.co.uk
auditionsapracticalguide.com
cpanel.auditionsapracticalguide.13ed48f74be945d53725c028a-17406.sites.k-hosting.co.uk
cpanel.auditionsapracticalguide.com
mail.auditionsapracticalguide.com
webdisk.auditionsapracticalguide.13ed48f74be945d53725c028a-17406.sites.k-hosting.co.uk
webdisk.auditionsapracticalguide.com
webmail.auditionsapracticalguide.13ed48f74be945d53725c028a-17406.sites.k-hosting.co.uk
webmail.auditionsapracticalguide.com
www.auditionsapracticalguide.13ed48f74be945d53725c028a-17406.sites.k-hosting.co.uk
www.auditionsapracticalguide.com

Other certificates including the domain name auditionsapracticalguide.com

(limited to 100 certificates)
ultraluxwindows.biz
*.13ed48f74be945d53725c028a-17406.sites.k-hosting.co.uk
auditionsapracticalguide.com
auditionsthecompleteguide.com
*.13ed48f74be945d53725c028a-17406.sites.k-hosting.co.uk
auditionsapracticalguide.com
*.zoeannbown.com
auditionsapracticalguide.com
webmail.zoeannbown.com
mail.auditionsapracticalguide.com
*.richardhayward.com
auditionsapracticalguide.com
webdisk.musicaltheatreauditions.info

Certificate

The complete raw certificate details for auditionsapracticalguide.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2+LErOfMfSgU/oYX/0R
/HRdMv9PGpDtWEoYrSxzsdL1e8RdVZJOu/u4FKxjZ5g56fiStNwxMb8+Tx5+E+uY
QCyOa7VemIr23Knc6A0FX9a5hPwyblLapFA3s+T6Wcbb6dX7ESWOCymVdRfCIK5J
DF0YcAuG7yf7/IWSkImdZqRpc5RKdO1tRhPo6Ahh9T3cD/P9xX05WxK2ldSxdVmz
F+n81Mk0fFFdW/uHvRZ8B0nfoB3Zfz8TgasQpp3LL8eaWZPxjbkKpUKnVpyMk3ay
qhFBR4E4wNQjYSDBoWBiCo6Wofi7OWlaie2W1TJvTU1iGGufYeuKvE2pVyWckhKt
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334111254776381027407256925375582409219252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-17 23:02:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 23:02:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auditionsapracticalguide.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24166520277149278220715599379033446220698437057876136738998201718733718390774154768099193653382306737554013330231156988655984250572156798988787751407464575414099997294643081517858151262318947743554651075020350278780449177115033635576389761984214979661447391638852028795049581044281913100379399757218731029007975061880606345080885897021656002162128751033847872981034614314179071355832986772489788868717589535606856330153219217174076730964829565279300426486502527919459653987037009763990209834105331589304895532190749608639928496035900060742798311578011318317726889889877458274145688695655043249246940488302398274710983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							991a0abbf512dcb5b258a372f57b0d0e67618ca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (643 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditionsapracticalguide.13ed48f74be945d53725c028a-17406.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditionsapracticalguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.auditionsapracticalguide.13ed48f74be945d53725c028a-17406.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.auditionsapracticalguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.auditionsapracticalguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.auditionsapracticalguide.13ed48f74be945d53725c028a-17406.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.auditionsapracticalguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.auditionsapracticalguide.13ed48f74be945d53725c028a-17406.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.auditionsapracticalguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auditionsapracticalguide.13ed48f74be945d53725c028a-17406.sites.k-hosting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auditionsapracticalguide.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e7bd1872f0000040300473045022100ae43d95ebf47f79d97364b874f3294aad79971018b2f2594493e5e6c9514b3a702205860285d590bb84c229ba19ebbe13cdab8d91d0f193e725990edfdb8856e4f2800750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e7bd1877c000004030046304402205e559570e19860da58e32b854074776bfa80e7d685d17fd75714ecff8a263c040220070ec3d4e27b730dd0394ea8c15d42fb83aaf56312b1783e05525e5141b92bcd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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