winit.mfr3.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9d:d6:e2:5e:f8:ab:e1:9f:b1:7f:70:92:ca:f9:81:8e:92 was issued on by Let's Encrypt.

With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=winit.mfr3.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9d:d6:e2:5e:f8:ab:e1:9f:b1:7f:70:92:ca:f9:81:8e:92
Serial Number (int): 315046819578304361317380940828373615218322
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a7:05:a0:f1:9d:fd:46:0f:cf:7c:f9:30:5a:33:26:00:5b:cc:f7:6d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ba:b4:88:b0:20:06:a1:64:03:ef:b7:ef:81:e6:ad:1f:11:6d:ea:cb
Fingerprint (sha256): b7:5b:12:34:b9:12:98:e8:15:c3:c8:57:8e:d1:23:b2:86:10:c5:48:10:da:fe:3b:ee:00:51:cb:cc:3f:c8:57

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate winit.mfr3.co.uk

32

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for winit.mfr3.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

winit.mfr3.co.uk
winit.planetradio.co.uk
winit.practicalclassics.co.uk
winit.radioaire2.co.uk
winit.radioaire3.co.uk
winit.radioborders.com
winit.radiocity2.co.uk
winit.radiocity3.co.uk
winit.steamrailway.co.uk
winit.tay2.co.uk
winit.tay3.co.uk
winit.tayfm.co.uk
winit.tfm2.co.uk
winit.tfm3.co.uk
winit.tfmradio.co.uk
winit.thehitsradio.com
winit.todaysgolfer.co.uk
winit.trailrunningmag.co.uk
winit.viking2.co.uk
winit.viking3.co.uk
winit.vikingfm.co.uk
winit.wave105.com
winit.westfm.co.uk
winit.westsound.co.uk
winit.westsoundradio.com
winit.winchristmas.co.uk
winit.winitforhim.co.uk
winit.winsomething.co.uk
winit.winsummer.co.uk
winit.wintoys.co.uk
winit.yourhorse.co.uk
winit.yours.co.uk

Other certificates including the domain name mfr3.co.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for winit.mfr3.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/B8gPl2J6/5dRZyvKLc
ClDerHms90XysoccP6bu0yqKFpAgoho/BGurqZXgckeNDB7oAAlrPeS2wWe4RBpR
51UrgbJkKNWhwAEZjVmokXaLp+SpMGZrUzeBvZgPBgV9gQIArJmucAl7RMRkDFZ8
v7nvT2/NHESM9Ve1n2KR1Xpnl4Tqph+fJzol1oNtMSCh74JY4zNsKsukcK7sIyi1
1XdI2zxBuv8AKDvOUgnRwJywuZxrE25DDFZtJBJ+Ro/6iISspCAE8hTlHr5PZwHb
G67wzKkHGBxs9d7AAeA+CtD4xy19mq5iwgnnA1uP3kYY5X30M/oy6JfyN+B+vj3E
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315046819578304361317380940828373615218322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-13 15:32:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-11 15:32:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'winit.mfr3.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22715244824498935426953513753190829669290480180888068969424909433885315026473121459958741149350203127704122138010739892811748283713059171410879473492972152737712336268624565757223485205863552441773724177022987756654234320556969893398180219267072686536492961611994463396358842894462518746035017107078540988001279837935775797289559875833659828826014244876884272230684037720669658063016557834377906380743285256680029501364584154827977095357671919025257757949661630608958802172927338139269469919525055081872260090747132774241171158576132210408586031201023442664524201023395393828003139017998040735720586294010416207873111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a705a0f19dfd460fcf7cf9305a3326005bccf76d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (731 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.mfr3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.planetradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.practicalclassics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioaire3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radioborders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.radiocity3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.steamrailway.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tay2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tay3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tayfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfm2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfm3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.tfmradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.thehitsradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.todaysgolfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.trailrunningmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.viking2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.viking3.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.vikingfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.wave105.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.westfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.westsound.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.westsoundradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winchristmas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winitforhim.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winsomething.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.winsummer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.wintoys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.yourhorse.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit.yours.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001670dea74360000040300463044022019bee1538dcbe2b638ead23a22ba9a930b2399215847f170255a1f4986f3c3d802200b63ef2d4ce09bda9709e3f11abb5021972958f3aa5cbd9ba9759df4f27e9afe007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001670dea73f600000403004730450220486542cac93a7efac97073beb0aa3b5aa9a8a22269d79df4d08c6a54b25c7dc802210089941842c947d6f276200e5241e91d4e845d589f6ac8754049fa385c279ba7bf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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