chrisrigg.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:b7:2d:fd:97:04:26:3f:11:63:bd:0d:3e:31:a5:05:d5:af was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=chrisrigg.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b7:2d:fd:97:04:26:3f:11:63:bd:0d:3e:31:a5:05:d5:af
Serial Number (int): 410781948847460855402243059388998830380463
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 53:23:fe:10:23:6b:e3:fb:39:56:08:53:c8:0e:fe:49:54:e0:78:a1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9e:f7:03:e5:62:93:f4:47:42:f0:0b:43:07:fa:70:68:d4:c4:fc:a5
Fingerprint (sha256): c6:74:42:53:6c:33:c8:83:f7:f9:82:ac:18:50:24:79:f8:97:a0:b9:5a:70:f2:71:df:72:e7:5a:9b:99:c9:d9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate chrisrigg.co.uk

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chrisrigg.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a1hiphop.com.netwowrk.com
chrisrigg.co.uk
fzf.in
goodseats.net
internet.restaurant.bitcoinsgo.com
manilaforvip.com
pahrise.com.adflegal.sex
qualitaetsapotheke.info
savines.com
siteseoanalytics.com
stflanaganinstitute.net
theartnet.com.michianagarbage.com

Other certificates including the domain name chrisrigg.co.uk

(limited to 100 certificates)
theconcise.bible
chrisrigg.co.uk
chrisrigg.co.uk
adfalert.org
www.chrisrigg.co.uk
chrisrigg.co.uk
domainstocash.com.lasvegaschillerparts.com.mamaweed.ca

Certificate

The complete raw certificate details for chrisrigg.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgK4Ptgg8Lyn65ayM2k6
Kr8iZzIxKXyyCSsgbwu3ZwfrJtYj1fELj0TDtVhSnvMZry32snY+B4K/DuGHqXyq
vXWsR7hgwHDyA0N2axlYXr707P1H/U0mLBS1xnjV45NcSpZ+rLGL4jdd6AGDvUxJ
BP36yH7qE3HzPOtLWTrSDHgepOpi7/opB4rXto/UTSmD2LqWZuULVu52sy0ezQg2
S4I9ZSfGQcHNYQ09l5bb6pc82gy7DTepU/Wd0gifJvgj8aVt+BdCH7OBaVzFzWlj
TWAXtZq6F+qn6qQa6Qc9Tf8vMMl+C4svhfW1lCxGd3sRMvu+k0WRPXAsvngtoC+h
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410781948847460855402243059388998830380463
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 01:18:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 01:18:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chrisrigg.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24996525521736521715559126374175921819485293966566219908143752541506389952234729668106142159561185689267681300338681494388259510351034523752272102337364204065676454917382359104588862788210787505382154141829816498169882413898962191911460991570327165226646979823238829579046980496852316676134751912502839620072836151559414011156538894827040849978698337010258395313275216746006725585156563652229297627946141408937084158878105413191721935043321112750760624808846291938492470838021508440723536092011221493600146037563437188364864552742603320725117163777984184739950862315991189441677524542821550112876939238284668424921521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5323fe10236be3fb39560853c80efe4954e078a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (271 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a1hiphop.com.netwowrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrisrigg.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fzf.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodseats.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internet.restaurant.bitcoinsgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manilaforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pahrise.com.adflegal.sex'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualitaetsapotheke.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siteseoanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stflanaganinstitute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theartnet.com.michianagarbage.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b176094a2000004030047304502205a2854b56291bf0ff886783dea0a88acd20775368814ee21521d86719f3c7647022100cf45a81a988b4b47a7cf7f6d1fd2ce215bc9813233930a82bb8bea694400563c007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b1760949a000004030047304502205a880277dc812444ace67bbc52768e219528a27e916ad65f33a537c9fcb57203022100a32a793404af52f71b6b59979296bf9a7b7f0b14fca5ea7987fe2d04e121541a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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