precisepresentations.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:24:9d:73:da:d5:b5:93:dc:c3:aa:0a:f0:ed:f1:25:93:39 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=precisepresentations.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:24:9d:73:da:d5:b5:93:dc:c3:aa:0a:f0:ed:f1:25:93:39
Serial Number (int): 273796313352408575674781960422873293493049
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a5:17:52:25:f2:3c:34:f1:ce:ae:d0:e9:cb:6f:aa:59:65:b2:84:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e7:4c:71:9b:75:08:b1:02:95:d9:83:44:0f:75:fb:74:de:3d:7e:24
Fingerprint (sha256): 8a:5d:31:5f:dd:3b:56:2d:d9:a4:08:0d:57:7b:d5:c6:b9:b2:59:1c:9e:32:f4:59:3c:2f:a5:cd:e2:bc:26:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate precisepresentations.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for precisepresentations.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

altrinchamseo.com
altrinchamseo.tsar.on-rev.com
autodiscover.altrinchamseo.com
autodiscover.precisepresentations.com
cpanel.altrinchamseo.com
cpanel.precisepresentations.com
mail.altrinchamseo.com
mail.precisepresentations.com
precisepresentations.com
precisepresentations.tsar.on-rev.com
webdisk.altrinchamseo.com
webdisk.precisepresentations.com
webmail.altrinchamseo.com
webmail.precisepresentations.com
www.altrinchamseo.com
www.altrinchamseo.tsar.on-rev.com
www.precisepresentations.com
www.precisepresentations.tsar.on-rev.com

Other certificates including the domain name precisepresentations.com

(limited to 100 certificates)
precisepresentations.com
trainingoutofthebox.com
precisepresentations.com
fastwp.co.uk
precisepresentations.com
precisepresentations.com

Certificate

The complete raw certificate details for precisepresentations.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynVIvsqZ329muttEKTk+
jGAt7yRc0gs/o4Mmb6aJpuZ0k7brUkyFPfV56zQVhyqfnkHCyoZF9HgLKM6fMkrp
M/kH2z50P9qQFSCN3sa9qeLGKYOO8ZqwHhrmGsmqF4h5OYkbAVblg+4MOqOAlPYQ
Z4dr9ZIgQ9oFGXHnzwpRMd1FLaFD+BhcDGWaqVizkmmsWVoGYSpKQX7xBEKnq0xB
v5c9PdO88Rh3ET4d7FDfVbcdzFJ70RdSqCUaeXv9dBpW+OE0y94EBTYPpIo8MzyF
3q024p2PAOgQ2R6OtmKN5B8IXiajk/S+CGQoPjof0UaxwzAv2RoWApOD+ndbukO5
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273796313352408575674781960422873293493049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-24 09:55:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-22 09:55:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'precisepresentations.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25557972578593242495159572455361535596198720546990451588275062422256621858938818398474483649129485346459245791218429488946215875961800427087987105176504397889306334837777850319533142269041947305863555188799153136786916692880795691693771245450467184501944438311904008485355463209937040101278078734295115912474938855234320662562214667848237737595817938235362420296972193186406732339423969509452395728114214853108744944331417080275412300550409285098457954650421444418816660891902291146585173719013957551416521563408857045641648972068017912560902855371105012665530477065421064875245252048628614173559918071055531414632891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5175225f23c34f1ceaed0e9cb6faa5965b28441
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (555 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altrinchamseo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altrinchamseo.tsar.on-rev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.altrinchamseo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.precisepresentations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.altrinchamseo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.precisepresentations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.altrinchamseo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.precisepresentations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precisepresentations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precisepresentations.tsar.on-rev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.altrinchamseo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.precisepresentations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.altrinchamseo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.precisepresentations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altrinchamseo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altrinchamseo.tsar.on-rev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.precisepresentations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.precisepresentations.tsar.on-rev.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169af57b6170000040300473045022040ddce6cb5064b6cd898dd561ccdf37dc7a52cd1529a0a0dd5dce288ce85511f02210095725ec4cf8d4481d601967b46f2b5dbe1a2be552174669e024b68d03760463b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169af57b69c0000040300473045022100df04756843fedd2c1ae5f0a2b596513373c1947a68e57ae11abe3c6615d253f60220372d35e575697f2fa8bac70f610360720d6f73a4919b75d2792254916008bfcc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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