cpcontacts.ciic.ventures

Issued by R3

About this certificate

This digital certificate with serial number 03:36:21:5a:73:85:de:4c:0b:d2:56:d9:e2:a9:96:da:2a:0b was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cpcontacts.ciic.ventures

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:36:21:5a:73:85:de:4c:0b:d2:56:d9:e2:a9:96:da:2a:0b
Serial Number (int): 279756439782672834965894311506942092782091
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 05:31:11:b8:a7:47:9c:6f:c5:9c:25:cf:1a:98:d5:08:c6:cf:82:aa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 88:1c:33:24:07:1c:dd:c3:3f:b7:09:80:ae:17:86:d5:e2:12:97:e9
Fingerprint (sha256): e8:51:a6:5d:fa:58:5b:e0:74:3e:53:01:dc:8f:50:d2:ff:e0:a4:67:21:fe:71:b9:65:f6:2d:32:be:a1:01:0a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cpcontacts.ciic.ventures

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cpcontacts.ciic.ventures

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.ciic.ventures
ciic.ventures
cpanel.ciic.ventures
cpcalendars.ciic.ventures
cpcontacts.ciic.ventures
mail.ciic.ventures
webdisk.ciic.ventures
webmail.ciic.ventures
www.ciic.ventures

Other certificates including the domain name ciic.ventures

(limited to 100 certificates)

Certificate

The complete raw certificate details for cpcontacts.ciic.ventures in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm0m5/9zVxF7hlTVskmj
r/XwN2gMwYk1fR0cQa787gxbYULrKtKFTrWWuk6lUFAgdGelq8PelStgtVxvftsl
7FltaB23+k7le3vXnX+VcTS+5vGTjV5Po9xKlvzvt3NOk/bINU+czjqwsxGgk1Gr
RooxzOFTA1QKj54TpqDfA/7RA9BFtO5i1RaCxlQT5n27H4c/eLczECfqNA+LU8Mn
GY2EH/HPuSp611E2WfnCwL8c4NuPRtdB94UWZYdx6DPUEr7+24eiduBRRFGkoXTt
MZQW//MuBqQvN2q7oHqsRfAEZNRgUPzPf0+YK24agoRqqhy+/AccPH1+2I2y6CtV
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279756439782672834965894311506942092782091
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 02:57:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 02:57:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpcontacts.ciic.ventures'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22019289910282052840366190879659365730865245468433236172624672653638573579523598320559413343259795667239812647209377419401217780936683049818864155559374046937089444114289702436636555148088588396382098268319995927302190656547441954525386925604777915000025076906603696599213371114827845665246823849203883626719175870519226436444863387870920198692776525030322310569874526105615512135680550091041782676928642404057036971999833387203969502028663247158045681168763505055644791200280035074316658286353343031658700674300203947253791589986961062425451274714884078616489037088973110689972448104008858827663729438489072580122083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							053111b8a7479c6fc59c25cf1a98d508c6cf82aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ciic.ventures'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciic.ventures'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.ciic.ventures'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.ciic.ventures'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.ciic.ventures'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ciic.ventures'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.ciic.ventures'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ciic.ventures'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciic.ventures'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b4b3b1a13000004030046304402202813e407254f141ffaafb057d7e90ebfcacbb3fac418c9cf6ff15718759d677f02205d266100bd7c085654b2864426bd5e83656bb06c9053bc0a857e9e739f7fd38c00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b4b3b1a70000004030047304502205192f69fdc79a2dab3830cc9631cc1b48a6329b5734033c01a42a9ab14c78648022100fe6c4c9a8a36923f381f3585dda26041abc95bbbcc3af24b0794a3171783b444
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005c3f33e4d80695a46bf19c7c38f50ecbc5e28f820c8b11589fd035b31abba4cc1c35104de41522deee615cfe943fdda0d6022c16a077b072a495c7ccf66ec894edd5a99e7a45de9c4c83e5f25800525b137842e6b6b0bca3d7f7960d8700e7cd241fa56d6cbee42977368215868e0f225a8d60960f84d2311dc79a5d3b66c974dc7b61f1f8b2b89681a7360cc0b690556aa5cdc8caad4a61eb5cdf73307064cf2b5e79bd0ea5cfa957d364df0758e5987336fd0be0a74540d05b849805f35af863bc8f5b74d166f0ddd2706ed803ee054994a873e11181eabd15973eb4bc1b8d07b36daf89a065ee4bbde2d0444f00630c9f43bd3555ca6812f6541359ab17da