mail.rebeccasingsonmd.com

Issued by R3

About this certificate

This digital certificate with serial number 04:da:ce:99:b0:b6:0b:11:f1:c4:55:ae:1a:7c:b7:1b:f6:d1 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mail.rebeccasingsonmd.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:da:ce:99:b0:b6:0b:11:f1:c4:55:ae:1a:7c:b7:1b:f6:d1
Serial Number (int): 422905318688483661968805742263099098658513
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5c:e8:ca:6f:9f:19:1d:5e:cd:60:f8:0e:b6:7a:2e:1a:90:24:8c:eb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6d:ca:76:d1:a5:9f:39:fc:3b:08:8b:ae:79:95:95:bb:5b:e4:ed:6e
Fingerprint (sha256): cc:92:fb:4b:0a:34:54:79:d3:27:13:3b:ff:47:89:33:6b:19:3f:31:47:05:97:fd:07:cf:34:72:83:02:91:fb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mail.rebeccasingsonmd.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.rebeccasingsonmd.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.rebeccasingsonmd.com
rebeccasingsonmd.com
webmail.rebeccasingsonmd.com
www.rebeccasingsonmd.com

Other certificates including the domain name rebeccasingsonmd.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for mail.rebeccasingsonmd.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+vAZnb9PPzp+fAofOHav
3yu9AfhbI3BuQcHazwMgBALRs9/AfGjWICDt0IxtjJ7oG8nNShstSgDRYrTigX9E
FGJhWWHsigkK7fk8RjRo4WHnN/x8kW0f0cw6s81wQ2e2l44FIp1iF7yj068qPXsw
hgOGtTcYDRLsVziAr9DxlIAIdz9o4XUJ1tqFAN9tlOOVukVlR87mUlzs2gQxfMGm
omJzYIcu/8cHUwddoMJ4dvjkGf5y8nu5xpNgf5ir2REIM4OAysZgS0T6ZkHya87B
/unFtDcHqXdrI+dCMiWtDnvVC/62JMXRwLmib/ZxAAGAD3WoC7f1fR4qNelnNDO6
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422905318688483661968805742263099098658513
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 03:07:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 03:07:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.rebeccasingsonmd.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31677973995464135032958903436848359159811846220952385577430098167626805557957396864669394849424224106835920463279341427531221989160289130668029991136505333890364460208847152108690276406554931019307872302073759880861108566776680872717894168410566466108222555164612180321081563919541150492393666742450298275056824242793136915612383579243624982183036953891531485221451650446761557444209435700781304697802971415308484359198549033489679363881066942450529305266003939699791393456556810873379177063816844962631766987400188769727047602521066664615407827023649015417883281620142388620862252665572988921394761978285769446636181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ce8ca6f9f191d5ecd60f80eb67a2e1a90248ceb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.rebeccasingsonmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebeccasingsonmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.rebeccasingsonmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rebeccasingsonmd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e35fe251000000403004630440220650bbc1f1d210565fb6f9879e93116a820db0d230890c14ba57d76b5a4452127022023f2c0e5d5eab420e99cb0134f5040294d17b8bce0d5bc5ddc21d5cac9bcb22e007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e35fe2538000004030046304402206330ca084b88ebbde56843dec6c0ae2fb6b3475046e65acb439dd6bd8cdefb2c02205142e3a2e82e9441bb0309ad43e7c491ed500cade9761a262f77761660772121
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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