lettershapes.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6a:72:47:49:8d:b4:03:9f:f0:c9:a7:14:e6:67:30:2f:18 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lettershapes.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6a:72:47:49:8d:b4:03:9f:f0:c9:a7:14:e6:67:30:2f:18
Serial Number (int): 297558690825339437114188600030240198111000
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 92:c7:fb:31:43:e4:05:28:53:1b:36:23:c2:d8:cd:37:75:2a:be:de
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 02:69:b8:6f:68:2f:5b:24:4d:16:0c:d9:b9:04:44:52:82:bc:54:29
Fingerprint (sha256): e0:d8:73:be:df:d7:6b:5f:2b:af:08:00:34:21:f4:52:9e:0a:79:e3:fa:c8:40:8e:62:c8:b8:c3:23:82:ac:41

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lettershapes.co.uk

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lettershapes.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.lettershapes.co.uk
autodiscover.masteringmoderation.co.uk
cpanel.lettershapes.co.uk
cpanel.masteringmoderation.co.uk
lettershapes.co.uk
lettershapes.itc.on-rev.com
mail.lettershapes.co.uk
mail.masteringmoderation.co.uk
masteringmoderation.co.uk
masteringmoderation.itc.on-rev.com
webdisk.lettershapes.co.uk
webdisk.masteringmoderation.co.uk
webmail.lettershapes.co.uk
webmail.masteringmoderation.co.uk
www.lettershapes.co.uk
www.lettershapes.itc.on-rev.com
www.masteringmoderation.co.uk
www.masteringmoderation.itc.on-rev.com

Other certificates including the domain name lettershapes.co.uk

(limited to 100 certificates)
lettershapes.co.uk
mayfield-biggar.net
lettershapes.co.uk
lettershapes.co.uk
lettershapes.co.uk

Certificate

The complete raw certificate details for lettershapes.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEFga0jIi+mVqBgZoxKe
oidAQLeOALJF8adlYtpcNCwayvKd1Qm+TFv0YZpcD9dpWdHImMVsyKXNq3MMMqQ0
VRILQEOJ4fYGdJFfuu55ZckB4624/Fc103iOFEm2KjqaWQgJsIGXYJV4D35I+09Q
FxNSW09O3c0YT9xOuGy//KK5xfFD/lK9oNyMRlqHssHERTuapL4MOfEz++gyJx3e
tQud3cRqETUZB+bLiKMEUgfMC9ij908ezssbJajHYRB0pbDmpFrx5m2VCMa7rrZ5
WXrmv3iirubyTC6VHnHihUelv4Fpl/yenTvgg5OlMnVUbRFbXaHrz03OTNCiMGfe
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297558690825339437114188600030240198111000
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-24 09:00:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-23 09:00:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lettershapes.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25784852634337204977096051747562100437397381177945731949101667938057634605256914767934813508899064722909192199632427243700655103070606271430139099093359690794756353294774124711804909783431725041735433427939998149168133305756131089345073293089902277129208689798366767241766128039179912343584197501687274673098952907471817658663323562485937129000377437781794816892139353574912847705603012380781212545413148894919559895117098388434054630639493143189985396193462297351052248586656009324109585498890810225198072362413839606353266641205627916120051993309753617953608374732762970336941181795450201475257370226455377816837691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92c7fb3143e40528531b3623c2d8cd37752abede
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (561 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lettershapes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.masteringmoderation.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.lettershapes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.masteringmoderation.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lettershapes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lettershapes.itc.on-rev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lettershapes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.masteringmoderation.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masteringmoderation.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masteringmoderation.itc.on-rev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.lettershapes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.masteringmoderation.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.lettershapes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.masteringmoderation.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lettershapes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lettershapes.itc.on-rev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masteringmoderation.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masteringmoderation.itc.on-rev.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fd6ff017b000004030047304502210082a1200b6ac5e080b078616e4d2b5d84020747648d8df509c270913991d9d79502200d87eac84ae19024660defd0e43db3a3ba700892d137b0bd17c7d320b29b12520077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fd6ff037a0000040300483046022100b7ffc8680e88e17f7b420764a941d10c2f222f1b216b42db26c445a3dca198d5022100d10e610dd177af48eb5f21fb289d4395a72f88f93ed5e7451513630b58419ea8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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