*.openavenues.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:c2:ca:ad:5e:f3:b4:75:0b:93:d9:58:e9:84:3d:cd:32:b5 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.openavenues.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:c2:ca:ad:5e:f3:b4:75:0b:93:d9:58:e9:84:3d:cd:32:b5
Serial Number (int): 327621041226302676418258032276519070282421
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 30:bc:1c:b1:42:c5:85:e6:60:7a:8e:36:28:41:61:d3:90:81:94:f1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:d7:1c:62:2b:4c:0d:a2:1c:4d:69:6b:0e:78:e1:a1:ce:63:ed:bd
Fingerprint (sha256): e2:05:44:cb:45:9b:32:3c:d2:11:bc:3e:7b:93:83:4a:d3:89:8f:25:f3:e6:36:93:c8:bb:75:a0:63:4a:f9:af

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.openavenues.co.uk

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.openavenues.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.crede-signo.co.uk
*.furballsrescue.org
*.furrydogmother.co.uk
*.matthewbutler.info
*.openavenues.co.uk
cherishedmoments.info
cpanel.cherishedmoments.info
cpcalendars.cherishedmoments.info
cpcontacts.cherishedmoments.info
furballsrescue.org
furrydogmother.co.uk
mail.cherishedmoments.info
matthewbutler.info
openavenues.co.uk
webdisk.cherishedmoments.info
webmail.cherishedmoments.info
whm.cherishedmoments.info
www.cherishedmoments.crede-signo.co.uk
www.cherishedmoments.info
www.furballsrescue.crede-signo.co.uk
www.furrydogmother.crede-signo.co.uk
www.matthewbutler.crede-signo.co.uk
www.openavenues.crede-signo.co.uk

Other certificates including the domain name openavenues.co.uk

(limited to 100 certificates)
openavenues.co.uk
www.openavenues.co.uk
www.openavenues.co.uk
webmail.corstorphinesecurityedinburgh.co.uk
openavenues.co.uk
www.openavenues.co.uk
openavenues.co.uk
openavenues.co.uk
reachnorthwest.org
openavenues.co.uk
www.openavenues.co.uk
openavenues.co.uk
www.openavenues.co.uk
openavenues.co.uk
openavenues.co.uk
openavenues.co.uk
openavenues.co.uk
cherishedmoments.crede-signo.co.uk
*.openavenues.co.uk
openavenues.co.uk
*.openavenues.co.uk

Certificate

The complete raw certificate details for *.openavenues.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BPgMIiSOcX3SqSh3phV
YlktApzLVk9p9qUfluQlQRzi7qjmoeh2fPSLazKSb7RZ/D8IWzWElLEKDgmD0eFc
7xz5VrC94BtL7pGXQnzGj94mliVLGngrXH8MxN2szQq02HfoSCNyX9EWg7JKQ3QW
XURoetUGRCvGK6OBTst6oGKkIY6byT96JQT51A8xv5InIkwvxm4JmK8j/owP297u
0XiMFGvHCe6Nsu0Djzzv53+/7/svHmOhEU7aG2Tdj4nycRh0lvYuTKzw4CY+BimT
GUXe4dXVhly5ahqIAhC+uYcqjza8Gys2NK1jkkOcvvDfmCtMY/JnQaHBx8cBPbqR
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327621041226302676418258032276519070282421
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 17:41:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 17:41:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.openavenues.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30306994284817003991825906662723880023614848301628478055720041008085985686617220068571706625480934419686653637265020603386454271350711424979933651305258190640275533845355220611455675338307102362081134854231155099370722436879216374644006989952597676264461077109311914891431285297841910485898483689767778157590778753635850761075956583162689347442517863573674666670710363435164407064783845248756617964604751247589314272968711939076515870354950780619508769669300245428931150190712077225365369437187139765468540940540970237136674636180025505204332557616110572941842770167866253684597103587712721494981839702842481919562171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30bc1cb142c585e6607a8e36284161d3908194f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (649 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crede-signo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furballsrescue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furrydogmother.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matthewbutler.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openavenues.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cherishedmoments.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.cherishedmoments.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.cherishedmoments.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.cherishedmoments.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furballsrescue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furrydogmother.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cherishedmoments.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matthewbutler.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openavenues.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.cherishedmoments.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.cherishedmoments.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whm.cherishedmoments.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cherishedmoments.crede-signo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cherishedmoments.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.furballsrescue.crede-signo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.furrydogmother.crede-signo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matthewbutler.crede-signo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openavenues.crede-signo.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e5d2b58f10000040300483046022100ee1e9ff7f634797b72d5f36882f93c2d6eefb8cd0f03dd347ad4aab0e9840232022100fdd15b806a71d8d84cfd51ac67a3b7870464285725b27683e603c36b1b7c9540007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e5d2b59d9000004030047304502200152632eea7985eab78c17d3391717d4faf21aeaba9c9494b7c6993d955d6fe7022100c0232a8f4030e6184b6a0dea1f43fe5475d399fd8220b8cff1be1bc6a80e95b2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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